Function at 0x71a1385b
Capabilities:
Create thread
Link many functions at runtime
Resume thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
push esi
push edi
push 0x24
pop eax
call sub._Cntl.DLL__alloca_probe
xor ebx, ebx
cmp dword [0x71a15040], ebx
mov edi, esp
je 0x71a1387f
mov dword [ebp - 8], ebx
jmp 0x71a1388f
call fcn.71a11a57
cmp eax, ebx
mov dword [ebp - 8], eax
jne 0x71a13ad5
cmp dword [ebp + 8], ebx
jne 0x71a1389c
push 0x57
pop eax
jmp 0x71a13adf
push 0x71a13bc0
call dword [sym.imp._CKERNEL.DLL_GetModuleHandleA]
cmp eax, ebx
mov dword [ebp - 4], eax
je 0x71a13ada
mov esi, dword [sym.imp._CKERNEL.DLL_GetProcAddress]
push 0x71a13bb4
push eax
call esi
cmp eax, ebx
mov dword [0x71a150cc], eax
je 0x71a13ada
push 0x71a13bac
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150c0], eax
je 0x71a13ada
push 0x71a13b94
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150b8], eax
je 0x71a13ada
push 0x71a13b88
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150c8], eax
je 0x71a13ada
push 0x71a13b78
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150b4], eax
je 0x71a13ada
push 0x71a13b64
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150bc], eax
je 0x71a13ada
push 0x71a13b5c
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150a8], eax
je 0x71a13ada
push 0x71a13b54
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150a4], eax
je 0x71a13ada
push 0x71a13b48
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150ac], eax
je 0x71a13ada
push 0x71a13b3c
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150c4], eax
je 0x71a13ada
push 0x71a13b30
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150b0], eax
je 0x71a13ada
push 0x71a13b24
push dword [ebp - 4]
call esi
cmp eax, ebx
mov dword [0x71a150d0], eax
je 0x71a13ada
push 0xc
push 0x40
call dword [sym.imp._CKERNEL.DLL_GlobalAlloc]
mov esi, eax
cmp esi, ebx
je 0x71a13acc
lea eax, [ebp - 0xc]
push eax
push 4
push esi
push 0x71a12af1
push ebx
push ebx
call dword [sym.imp._CKERNEL.DLL_CreateThread]
cmp eax, ebx
mov dword [esi + 4], eax
je 0x71a13aba
push 0x71a13af4
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp._Cntl.DLL_RtlInitUnicodeString]
mov dword [ebp - 0x34], 0x18
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
push 0x24
push edi
push ebx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov dword [edi], ebx
mov byte [edi + 4], bl
mov byte [edi + 5], 7
mov word [edi + 6], 0x14
mov eax, dword [0x71a13aec]
mov dword [edi + 8], eax
mov eax, dword [0x71a13af0]
push 3
mov dword [edi + 0xc], eax
mov eax, dword [esi + 4]
push ebx
push 0x80
push ebx
mov dword [edi + 0x10], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x1f01ff
push esi
mov dword [edi + 0x14], 0x71a1364c
mov dword [edi + 0x18], 0x71a12bd5
mov dword [edi + 0x1c], esi
mov dword [edi + 0x20], ebx
call dword [sym.imp._Cntl.DLL_NtCreateFile]
cmp eax, 0xc0000034
je 0x71a13aad
cmp eax, 0xc000003a
je 0x71a13aad
cmp eax, ebx
jl 0x71a13aa3
push dword [esi + 4]
call dword [sym.imp._CKERNEL.DLL_ResumeThread]
mov eax, dword [ebp + 8]
mov dword [eax], esi
xor eax, eax
jmp 0x71a13adf
push eax
call dword [sym.imp._Cntl.DLL_RtlNtStatusToDosError]
mov dword [ebp - 8], eax
push dword [esi + 4]
mov dword [esi], ebx
call dword [sym.imp._CKERNEL.DLL_ResumeThread]
jmp 0x71a13ac3
call dword [sym.imp._CKERNEL.DLL_GetLastError]
mov dword [ebp - 8], eax
push esi
call dword [sym.imp._CKERNEL.DLL_GlobalFree]
jmp 0x71a13ad5
call dword [sym.imp._CKERNEL.DLL_GetLastError]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
jmp 0x71a13adf
mov eax, 0x277b
lea esp, [ebp - 0x40]
pop edi
pop esi
pop ebx
leave
ret 4