Function at 0x75a7384c
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x438
mov eax, dword [0x75bc8d18]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x42c], ecx
mov ecx, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x424], eax
mov dword [ebp - 0x430], ecx
mov dword [ebp - 0x428], ebx
mov esi, 0x759b7ff8
cmp dword [0x75bc8ca8], ebx
je 0x75a738b9
cmp eax, ebx
jne 0x75a738a0
mov eax, 0x759f5ea4
push ebx
push ebx
push esi
push esi
push esi
push esi
push edi
push eax
push 0x75a73be0
push ebx
push ebx
push 9
call fcn.759c26bf
add esp, 0x30
lea eax, [ebp - 0x428]
push eax
push 0x7fffffff
push dword [ebp - 0x424]
call fcn.759b4220
test eax, eax
jl 0x75a73bca
cmp dword [ebp - 0x424], ebx
je 0x75a73bca
cmp dword [ebp - 0x428], ebx
je 0x75a73bca
cmp dword [ebp - 0x42c], ebx
je 0x75a73bca
cmp dword [ebp - 0x430], ebx
je 0x75a73bca
cmp edi, 1
je 0x75a73915
cmp edi, ebx
jne 0x75a73bca
push ebx
mov byte [ebp - 0x41d], bl
call dword [0x75bc847c]
cmp eax, ebx
jl 0x75a739f6
mov byte [ebp - 0x41d], 1
call fcn.75a218b0
mov dword [ebp - 0x428], eax
cmp eax, ebx
je 0x75a73ba3
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push dword [ebp - 0x42c]
push edi
push dword [ebp - 0x424]
push eax
call dword [ecx + 0x50]
mov edi, dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 0x424], eax
lea eax, [ebp - 0x210]
push eax
push ebx
push 0x100000
call edi
mov dword [ebp - 0x434], eax
cmp eax, ebx
je 0x75a73b7f
push 0x759fd378
lea eax, [ebp - 0x210]
push eax
push 0x759fd600
lea eax, [ebp - 0x41c]
push 0x105
push eax
call fcn.759b4c31
add esp, 0x14
test eax, eax
jge 0x75a73a0b
cmp dword [0x75bc8ca8], ebx
je 0x75a739d1
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push 0x759fd568
push ebx
push ebx
push 9
call fcn.759c26bf
add esp, 0x30
mov eax, dword [ebp - 0x428]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp byte [ebp - 0x41d], bl
je 0x75a739eb
call dword [0x75bc8b6c]
mov eax, dword [ebp - 0x424]
jmp 0x75a73bcd
cmp eax, 0x80010106
je 0x75a73931
mov eax, 0x643
jmp 0x75a73bcd
lea eax, [ebp - 0x41c]
push eax
push ebx
push 0x100000
call edi
mov dword [0x75bceb30], eax
cmp eax, ebx
jne 0x75a73a4a
cmp dword [0x75bc8ca8], ebx
je 0x75a73a4a
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x41c]
push eax
push 0x759fd528
push ebx
push ebx
push 9
call fcn.759c26bf
add esp, 0x30
push 0x759fd380
push 0x105
lea eax, [ebp - 0x210]
push eax
call fcn.759b3d8c
test eax, eax
jge 0x75a73a82
cmp dword [0x75bc8ca8], ebx
je 0x75a739d1
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push 0x759fd4a8
jmp 0x75a739c5
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
lea eax, [ebp - 0x210]
push eax
push ebx
push ebx
push ebx
call edi
push ebx
push ebx
push ebx
push ebx
mov dword [ebp - 0x42c], eax
call edi
mov edi, eax
mov dword [ebp - 0x438], edi
cmp edi, ebx
je 0x75a73b61
cmp dword [ebp - 0x42c], ebx
je 0x75a73b61
call fcn.759c8759
test eax, eax
jne 0x75a73ae6
mov eax, dword [ebp - 0x428]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp byte [ebp - 0x41d], bl
je 0x75a73adf
call dword [0x75bc8b6c]
push 0xe
jmp 0x75a73bcc
mov eax, dword [ebp - 0x430]
push 0xc
mov dword [eax], edi
call fcn.759c6f57
mov edi, eax
pop ecx
cmp edi, ebx
je 0x75a73b2b
mov eax, dword [ebp - 0x434]
push ebx
push ebx
push edi
mov dword [edi], eax
mov eax, dword [ebp - 0x438]
push 0x75a73779
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x42c]
push ebx
push ebx
mov dword [edi + 4], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x75bceb2c], eax
cmp dword [0x75bceb2c], ebx
jne 0x75a739d1
push edi
call fcn.759c6f79
pop ecx
call fcn.759c6f05
cmp dword [0x75bc8ca8], ebx
je 0x75a739d1
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push 0x759fd428
jmp 0x75a739c5
cmp dword [0x75bc8ca8], ebx
je 0x75a739d1
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push 0x759fd3e8
jmp 0x75a739c5
cmp dword [0x75bc8ca8], ebx
je 0x75a739d1
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x210]
push eax
push 0x759fd528
jmp 0x75a739c5
call fcn.75af5e81
movzx esi, al
neg esi
sbb esi, esi
and esi, 0x33
add esi, 0x641
cmp byte [ebp - 0x41d], bl
je 0x75a73bc6
call dword [0x75bc8b6c]
mov eax, esi
jmp 0x75a73bcd
push 0x57
pop eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.759b1748
leave
ret 0x10