Function at 0x101f525
Capabilities:
Create thread

Disassembly:
mov eax, 0x1034e7d
call fcn.01027f98
sub esp, 0xa0
push ebx
push esi
push edi
push 0x1007f70
sub esp, 0x40
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov ecx, esp
push 0
push 0x200
push 0x122
mov edi, 0x1007aa4
push edi
mov esi, 0x1007a38
push esi
call fcn.01011ab4
and dword [ebp - 4], 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.01011b28
xor eax, eax
inc eax
mov dword [ebp - 4], eax
xor edx, edx
cmp dword [ebx + 8], edx
jne 0x101f753
cmp dword [ebx + 0x10], eax
jne 0x101f753
lea eax, [ebx + 0xc]
push eax
push 4
push ebx
push 0x101e9f9
push edx
push edx
call dword [sym.imp.msvcrt.dll__beginthreadex]
add esp, 0x18
test eax, eax
jne 0x101f664
call dword [sym.imp.msvcrt.dll__errno]
push dword [eax]
mov ebx, 0x4000
push 0x1007f20
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push 0
push ebx
push 0x13a
push edi
push esi
call fcn.01011ab4
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 1
call fcn.01011c4f
add esp, 0x4c
push 1
push 0
push ebx
push 0x13b
push edi
push esi
lea ecx, [ebp - 0xac]
call fcn.01011ab4
mov byte [ebp - 4], 4
push 0
lea ecx, [ebp - 0x6c]
push ecx
mov ecx, eax
call fcn.010127ba
mov esi, eax
mov byte [ebp - 4], 5
call dword [sym.imp.msvcrt.dll__errno]
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [eax]
push ecx
mov ecx, esi
call fcn.010127ba
mov byte [ebp - 4], 6
push 0x3008
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 5
call fcn.0101236e
add esp, 0x4c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x6c]
call fcn.01011afc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xac]
jmp 0x101f732
cmp eax, 0xffffffff
jne 0x101f73c
mov ebx, dword [sym.imp.msvcrt.dll__errno]
call ebx
cmp dword [eax], 0xb
jne 0x101f684
mov esi, 0x8007000e
jmp 0x101f78e
call ebx
push dword [eax]
mov ebx, 0x4000
push 0x1007f20
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push 0
push ebx
push 0x147
push edi
push esi
call fcn.01011ab4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 1
call fcn.01011c4f
add esp, 0x4c
push 1
push 0
push ebx
push 0x148
push edi
push esi
lea ecx, [ebp - 0x6c]
call fcn.01011ab4
mov byte [ebp - 4], 8
push 0xffffffffffffffff
lea ecx, [ebp - 0xac]
push ecx
mov ecx, eax
call fcn.010127ba
mov esi, eax
mov byte [ebp - 4], 9
call dword [sym.imp.msvcrt.dll__errno]
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [eax]
push ecx
mov ecx, esi
call fcn.010127ba
mov byte [ebp - 4], 0xa
push 0x3008
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 9
call fcn.0101236e
add esp, 0x4c
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xac]
call fcn.01011afc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.01011afc
jmp 0x101f67a
mov dword [ebx + 8], eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov byte [ebx + 4], al
mov dword [ebx + 0x10], 2
xor esi, esi
jmp 0x101f78e
push dword [ebx + 0x10]
push 0x100792c
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push edx
push 0x4000
push 0x127
push edi
push esi
call fcn.01011ab4
mov byte [ebp - 4], 2
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 1
call fcn.01011c4f
add esp, 0x4c
mov esi, 0x8000ffff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.01011bd1
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret