Function at 0x10010d70
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
push ebx
push esi
push edi
push 0x2c
lea eax, [esp + 0x28]
mov dword [esp + 0x14], ecx
push 0
push eax
mov ebx, edx
mov dword [esp + 0x2c], 0x30
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [esp + 0x48], str.SIBSharingHost
lea eax, [esp + 0x20]
mov dword [esp + 0x28], 0x1000fe50
push eax
call dword [sym.imp.USER32.dll_RegisterClassExW]
push 0x28
call dword [sym.imp.msvcrt.dll_void____cdecl_operator_new_unsigned_int_]
mov edi, eax
mov dword [esp + 0x18], eax
add esp, 4
test edi, edi
je 0x10010e0e
mov eax, dword [esp + 0x10]
lea esi, [edi + 0xc]
mov dword [edi + 4], 1
mov dword [edi + 8], 1
mov dword [edi], 0x10052114
mov dword [esi], 0
test eax, eax
je 0x10010df8
push esi
push eax
call dword [sym.imp.SHLWAPI.dll_SHStrDupW]
mov dword [esi + 4], ebx
test ebx, ebx
je 0x10010e05
mov eax, dword [ebx]
push ebx
call dword [eax + 4]
mov dword [esi + 0x10], 0
jmp 0x10010e14
xor edi, edi
mov dword [esp + 0x14], edi
push 0
push 0
lea esi, [edi + 0xc]
mov dword [esp + 0x24], edi
push esi
push 0x1000fe10
push 0
push 0
mov dword [esp + 0x30], esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 8], eax
mov eax, dword [0x1005e130]
cmp eax, dword [0x1005e134]
je 0x10010e6c
mov dword [eax], 0
mov dword [eax + 4], 0
test edi, edi
je 0x10010e58
lock inc dword [edi + 4]
mov dword [eax], esi
mov dword [eax + 4], edi
mov eax, dword [0x1005e130]
add eax, 8
mov dword [0x1005e130], eax
jmp 0x10010e7c
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.10011b70
mov eax, dword [0x1005e130]
mov esi, dword [0x1005e12c]
or ebx, 0xffffffff
mov dword [esp + 0x10], esi
cmp esi, eax
je 0x10010f6d
mov edi, dword [esi]
push 0
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x10010eb7
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 8], 0
jmp 0x10010ec1
cmp dword [edi + 8], 0
jne 0x10010f56
mov eax, dword [0x1005e130]
lea edi, [esi + 8]
mov dword [esp + 0x18], eax
cmp edi, eax
je 0x10010f22
or esi, 0xffffffff
mov eax, dword [edi]
mov ecx, dword [edi + 4]
mov dword [edi], 0
mov dword [edi + 4], 0
mov ebx, dword [edi - 4]
mov dword [edi - 8], eax
mov dword [edi - 4], ecx
test ebx, ebx
je 0x10010f12
mov eax, esi
lock xadd dword [ebx + 4], eax
jne 0x10010f12
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, esi
lock xadd dword [ebx + 8], eax
jne 0x10010f12
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
add edi, 8
cmp edi, dword [esp + 0x18]
jne 0x10010ed4
mov esi, dword [esp + 0x10]
or ebx, 0xffffffff
mov eax, dword [0x1005e130]
mov edi, dword [eax - 4]
test edi, edi
je 0x10010f4d
mov eax, ebx
lock xadd dword [edi + 4], eax
jne 0x10010f4d
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, ebx
lock xadd dword [edi + 8], eax
jne 0x10010f4d
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
sub dword [0x1005e130], 8
jmp 0x10010f5d
add esi, 8
mov dword [esp + 0x10], esi
cmp esi, dword [0x1005e130]
jne 0x10010e91
mov edi, dword [esp + 0x14]
test edi, edi
je 0x10010f8f
mov eax, ebx
lock xadd dword [edi + 4], eax
jne 0x10010f8f
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], ebx
dec ebx
jne 0x10010f8f
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret