Function at 0x1011c974
Capabilities:
Create thread
Resume thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [0x101dc354]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x6c]
xor ebx, ebx
mov dword [ebp - 0x7c], edx
push 0x58
mov esi, ecx
mov dword [ebp - 0x88], edi
push ebx
push eax
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x10], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
mov dword [ebp - 0x80], ebx
mov byte [ebp - 0x71], 1
mov dword [ebp - 0xc], ebx
test esi, esi
jne 0x1011c9c9
mov ebx, 0x80070057
jmp 0x1011cbc9
lea eax, [ebp - 0x10]
push eax
push 4
push esi
push 0x1011cc20
push ebx
push ebx
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
mov dword [ebp - 0x70], eax
test eax, eax
jne 0x1011ca0d
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test eax, eax
jle 0x1011c9f6
movzx eax, ax
or eax, 0x80070000
mov ebx, eax
test eax, eax
js 0x1011ca03
mov ebx, 0x80004005
mov eax, ebx
push 0x10049dbc
jmp 0x1011cba6
lea ecx, [ebp - 0x70]
call fcn.1011ccb0
mov ebx, eax
test ebx, ebx
jns 0x1011ca28
push 0x1004c220
push 1
push ebx
jmp 0x1011cba9
push dword [ebp - 0x70]
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x1011ca5b
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
test ebx, ebx
jle 0x1011ca4d
movzx ebx, bx
or ebx, 0x80070000
test ebx, ebx
js 0x1011ca54
mov ebx, 0x80004005
push 0x1004c248
jmp 0x1011ca20
push 0x3e8
push dword [ebp - 0x70]
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
test eax, eax
je 0x1011cb65
cmp eax, 0x102
jne 0x1011cab0
mov eax, dword [esi]
mov esi, dword [eax + 0x2c]
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x78]
mov ecx, esi
call dword [0x101e07c0]
call esi
test eax, eax
jns 0x1011cae6
push 0x1004c2ac
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov esi, dword [ebp - 0x78]
cmp byte [ebp - 0x71], 0
jne 0x1011ca5b
test edi, edi
je 0x1011cbb6
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
mov ecx, esi
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0x80]
push eax
push 0xfffffffffffffffe
push 0x30
call dword [0x101e07c0]
mov ecx, edi
call esi
test eax, eax
jns 0x1011cbb6
push 0x1004c2d4
jmp 0x1011cba6
cmp dword [ebp - 0x30], 0
ja 0x1011caf2
cmp dword [ebp - 0x34], 0
jbe 0x1011caa7
mov edi, dword [ebp - 0x38]
mov eax, edi
mul dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x3c]
mov esi, eax
mov eax, ecx
mul dword [ebp - 0x7c]
add esi, edx
add ecx, dword [ebp - 0x34]
adc edi, dword [ebp - 0x30]
push edi
push ecx
push esi
push eax
call fcn.100ba890
mov edi, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
test edi, edi
je 0x1011cb5d
mov ecx, dword [edi]
sub eax, dword [ebp - 0x80]
push eax
push 0xfffffffffffffffe
mov esi, dword [ecx + 0x14]
mov ecx, esi
push 0x30
call dword [0x101e07c0]
mov ecx, edi
call esi
test eax, eax
jns 0x1011cb57
push 0x1004c2d4
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x80], eax
jmp 0x1011caa7
lea eax, [ebp - 0xc]
mov byte [ebp - 0x71], 0
push eax
push dword [ebp - 0x70]
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetExitCodeThread]
test eax, eax
je 0x1011cb82
mov ebx, dword [ebp - 0xc]
jmp 0x1011caaa
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test eax, eax
jle 0x1011cb94
movzx eax, ax
or eax, 0x80070000
mov ebx, eax
test eax, eax
js 0x1011cba1
mov ebx, 0x80004005
mov eax, ebx
push 0x1004c288
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x1011cbc9
cmp eax, 0xffffffff
je 0x1011cbc9
push eax
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov ecx, dword [ebp - 8]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100b88c0
leave
ret 4