Function at 0x1163ed0
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push esi
call fcn.010dd7c0
test dword [esi + 0x2b660], 0x200
mov ebx, dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
jne 0x11640ad
mov eax, dword [esi + 8]
cmp dword [eax + 0xa64], 0
jne 0x11640ad
test byte [esi + 0x2b734], 1
jne 0x11640ad
mov edi, dword [ebp + 0xc]
test dword [edi + 0x46c], 0x1000
jne 0x11640ad
push 0x101403c
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x1163f96
push 0x1021210
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x1163f96
push 0x102389c
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x1163f96
push 0x1014034
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x1163f96
push 0x1023894
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x1163f96
test dword [edi + 0x46c], 0x80000
je 0x11640ad
push 0x102388c
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x11640ad
push 0x1023884
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x11640ad
push 0x102387c
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x11640ad
push 0x1010148
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x11640ad
push 0x1023874
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x11640ad
push 0x102386c
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x11640ad
push 0x1023868
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x11640ad
push 0x1023860
push 0x1010124
call fcn.0102c110
test eax, eax
jne 0x11640ad
mov ecx, dword [esi + 8]
mov edx, dword [ecx]
push 0x1023850
push 0x1015934
push connect
push edx
call fcn.010ba400
test eax, eax
jne 0x11640ad
cmp dword [esi + 0x2d49c], eax
je 0x11640ad
push 1
lea eax, [esi + 0x2d4a4]
push eax
call ebx
push esi
push 0x1140ad0
call fcn.0102b3c0
mov edi, eax
test edi, edi
je 0x116409d
cmp edi, 0xffffffff
je 0x116409d
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
push edi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push esi
call fcn.0111b080
push 0
push 1
push esi
call fcn.011013f0
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x46c]
test eax, 0x800
je 0x116412b
push 1
lea edx, [esi + 0x2d404]
push edx
call ebx
mov eax, dword [esi + 8]
push 2
push eax
xor edi, edi
call fcn.010de4b0
test eax, eax
jne 0x11640ed
push esi
call fcn.010fccb0
cmp eax, 2
je 0x11640ed
test byte [esi + 0x2b660], 0x10
je 0x11640f2
mov edi, 0x10
push 2
push 0
push 0x10709e0
push edi
push 0x4001
push 0
push esi
call fcn.0113db40
push 1
lea ecx, [esi + 0x2d4a8]
push ecx
call ebx
test eax, eax
jne 0x116418f
push esi
push 0x112e3a0
push esi
call fcn.01071100
pop edi
pop esi
pop ebx
pop ebp
ret 8
test al, al
jns 0x1164160
lea edx, [ebp + 8]
push edx
push 0
push esi
push 0x1163380
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateThread]
mov edi, eax
test edi, edi
je 0x1164160
cmp edi, 0xffffffff
je 0x1164160
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
push edi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [ebp + 0xc]
test dword [eax + 0x46c], 0x200
jne 0x1164189
cmp dword [eax + 0x194], 0
jne 0x1164189
push 0
push 3
push esi
call fcn.0113dd30
pop edi
pop esi
pop ebx
pop ebp
ret 8
push esi
call fcn.01148760
pop edi
pop esi
pop ebx
pop ebp
ret 8