Function at 0x100134c0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10050131
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x600
mov eax, dword [0x1006099c]
push ebx
push esi
push edi
xor ebx, ebx
mov edi, ecx
push ebx
mov esi, 0xf
push 0x100534c7
lea ecx, [esp + 0x1e0]
mov dword [esp + 0x60c], eax
mov dword [esp + 0x38], edi
mov dword [esp + 0x1f8], esi
mov dword [esp + 0x1f4], ebx
mov byte [esp + 0x1e4], bl
call fcn.10001f80
push ebx
lea eax, [esp + 0x1dc]
push eax
mov ecx, edi
mov dword [esp + 0x61c], ebx
call fcn.10012660
test al, al
jne 0x10013564
cmp dword [esp + 0x1f0], 0x10
jb 0x10013c0f
mov ecx, dword [esp + 0x1dc]
push ecx
call fcn.10036530
add esp, 4
xor al, al
jmp 0x10013d04
lea ecx, [esp + 0x10]
call fcn.1002d9e9
push ebx
push 0x100534c7
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x61c], 1
mov dword [esp + 0x1c0], esi
mov dword [esp + 0x1bc], ebx
mov byte [esp + 0x1ac], bl
call fcn.10001f80
push 2
push 0x10053a50
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x61c], 2
call fcn.10001f80
push 7
push 0x10053904
lea ecx, [esp + 0x1a8]
call fcn.10001d80
mov edx, dword [0x100a1ed0]
push edx
lea eax, [esp + 0x1f8]
push 0x100537ec
push eax
call fcn.10040b0b
add esp, 0xc
lea ecx, [esp + 0x168]
push ecx
lea ecx, [esp + 0x14]
call fcn.1003011d
mov edi, eax
push 1
lea edx, [esp + 0x150]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x61c], 3
call fcn.100301f0
mov esi, eax
lea eax, [esp + 0x130]
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x618], 4
call fcn.1002fc03
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x1d8]
push ecx
lea edx, [esp + 0xfc]
push 0x10053a40
push edx
mov byte [esp + 0x620], 5
call fcn.10011720
push 0x10053a38
push eax
lea eax, [esp + 0xd4]
push eax
mov byte [esp + 0x62c], 6
call fcn.10002d80
mov ecx, dword [esp + 0x30]
push ecx
push eax
lea edx, [esp + 0xa8]
push edx
mov byte [esp + 0x638], 7
call fcn.10002ce0
push 0x10053a28
push eax
lea eax, [esp + 0x98]
push eax
mov byte [esp + 0x644], 8
call fcn.10002d80
mov byte [esp + 0x644], 9
push esi
push eax
lea ecx, [esp + 0x88]
push ecx
call fcn.10002ce0
push 0x10053a20
push eax
lea edx, [esp + 0x120]
push edx
mov byte [esp + 0x65c], 0xa
call fcn.10002d80
add esp, 0x48
push edi
push eax
lea eax, [esp + 0x11c]
push eax
mov byte [esp + 0x620], 0xb
call fcn.10002ce0
push 0x10053a18
push eax
lea ecx, [esp + 0xb8]
push ecx
mov byte [esp + 0x62c], 0xc
call fcn.10002d80
lea edx, [esp + 0x20c]
push edx
push eax
lea eax, [esp + 0x54]
push eax
mov byte [esp + 0x638], 0xd
call fcn.10002d80
add esp, 0x24
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x620], 0xe
call fcn.10001c90
mov eax, dword [esp + 0x4c]
mov edi, 0x10
cmp eax, edi
jb 0x1001375d
mov ecx, dword [esp + 0x38]
push ecx
call fcn.10036530
add esp, 4
cmp dword [esp + 0xbc], edi
mov esi, 0xf
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
jb 0x10013787
mov edx, dword [esp + 0xa8]
push edx
call fcn.10036530
add esp, 4
cmp dword [esp + 0x12c], edi
mov dword [esp + 0xbc], esi
mov dword [esp + 0xb8], ebx
mov byte [esp + 0xa8], bl
jb 0x100137b5
mov eax, dword [esp + 0x118]
push eax
call fcn.10036530
add esp, 4
cmp dword [esp + 0xf4], edi
mov dword [esp + 0x12c], esi
mov dword [esp + 0x128], ebx
mov byte [esp + 0x118], bl
jb 0x100137e3
mov ecx, dword [esp + 0xe0]
push ecx
call fcn.10036530
add esp, 4
cmp dword [esp + 0x68], edi
mov dword [esp + 0xf4], esi
mov dword [esp + 0xf0], ebx
mov byte [esp + 0xe0], bl
jb 0x1001380b
mov edx, dword [esp + 0x54]
push edx
call fcn.10036530
add esp, 4
cmp dword [esp + 0x84], edi
mov dword [esp + 0x68], esi
mov dword [esp + 0x64], ebx
mov byte [esp + 0x54], bl
jb 0x1001382d
mov eax, dword [esp + 0x70]
push eax
call fcn.10036530
add esp, 4
cmp dword [esp + 0xa0], edi
mov dword [esp + 0x84], esi
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], bl
jb 0x10013858
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.10036530
add esp, 4
cmp dword [esp + 0xd8], edi
mov dword [esp + 0xa0], esi
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x8c], bl
jb 0x10013886
mov edx, dword [esp + 0xc4]
push edx
call fcn.10036530
add esp, 4
cmp dword [esp + 0x110], edi
mov dword [esp + 0xd8], esi
mov dword [esp + 0xd4], ebx
mov byte [esp + 0xc4], bl
jb 0x100138b4
mov eax, dword [esp + 0xfc]
push eax
call fcn.10036530
add esp, 4
cmp dword [esp + 0x148], edi
mov dword [esp + 0x110], esi
mov dword [esp + 0x10c], ebx
mov byte [esp + 0xfc], bl
jb 0x100138e2
mov ecx, dword [esp + 0x134]
push ecx
call fcn.10036530
add esp, 4
cmp dword [esp + 0x164], edi
mov dword [esp + 0x148], esi
mov dword [esp + 0x144], ebx
mov byte [esp + 0x134], bl
jb 0x10013910
mov edx, dword [esp + 0x150]
push edx
call fcn.10036530
add esp, 4
cmp dword [esp + 0x180], edi
mov dword [esp + 0x164], esi
mov dword [esp + 0x160], ebx
mov byte [esp + 0x150], bl
jb 0x1001393e
mov eax, dword [esp + 0x16c]
push eax
call fcn.10036530
add esp, 4
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
lea ecx, [esp + 0x14]
mov byte [esp + 0x614], 0xf
call fcn.10030a03
mov byte [esp + 0x200], bl
xor eax, eax
mov ecx, 0xff
lea edi, [esp + 0x201]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
push 0x100534c7
lea ecx, [esp + 0x18c]
mov byte [esp + 0x61c], 0x10
stosb byte es:[edi], al
mov dword [esp + 0x1a4], esi
mov dword [esp + 0x1a0], ebx
mov byte [esp + 0x190], bl
call fcn.10001f80
mov ecx, 0xa
mov esi, 0x1005390c
lea edi, [esp + 0x200]
rep movsd dword es:[edi], dword [esi]
push 0x100539a4
movsw word es:[edi], word [esi]
push 0x2b
lea ecx, [esp + 0x208]
push ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x620], 0x11
movsb byte es:[edi], byte [esi]
call fcn.10030a13
lea eax, [esp + 0x200]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x100139e4
sub eax, esi
push eax
lea edx, [esp + 0x204]
push edx
lea ecx, [esp + 0x18c]
call fcn.10001f80
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x1a8]
push eax
lea ecx, [esp + 0x190]
call fcn.10001c90
lea ecx, [esp + 0x184]
push ecx
lea ecx, [esp + 0x20]
call fcn.10004480
mov ecx, 9
mov esi, 0x1005395c
lea edi, [esp + 0x200]
rep movsd dword es:[edi], dword [esi]
push 0x100539a4
push 0x26
lea edx, [esp + 0x208]
push edx
lea ecx, [esp + 0x20]
movsw word es:[edi], word [esi]
call fcn.10030a13
lea eax, [esp + 0x200]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10013a61
sub eax, esi
push eax
lea eax, [esp + 0x204]
push eax
lea ecx, [esp + 0x18c]
call fcn.10001f80
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x1a8]
push ecx
lea ecx, [esp + 0x190]
call fcn.10001c90
lea edx, [esp + 0x184]
push edx
lea ecx, [esp + 0x20]
call fcn.10004480
push ebx
mov esi, 0xf
push 0x100534c7
lea ecx, [esp + 0x1c4]
mov dword [esp + 0x1dc], esi
mov dword [esp + 0x1d8], ebx
mov byte [esp + 0x1c8], bl
call fcn.10001f80
lea eax, [esp + 0x1bc]
push eax
sub esp, 0x1c
mov ecx, esp
lea edx, [esp + 0x3c]
mov dword [esp + 0x38], esp
push edx
push ecx
mov byte [esp + 0x63c], 0x12
call fcn.100326fb
add esp, 8
call fcn.100323cd
add esp, 0x20
cmp al, bl
je 0x10013b3b
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x1e0]
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.10001e90
mov edi, dword [esp + 0x4c]
mov ecx, edi
call fcn.10011500
cmp al, bl
jne 0x10013c16
mov eax, dword [esp + 0x1d4]
mov edi, 0x10
cmp eax, edi
jb 0x10013b5b
mov eax, dword [esp + 0x1c0]
push eax
call fcn.10036530
add esp, 4
cmp dword [esp + 0x19c], edi
mov dword [esp + 0x1d4], esi
mov dword [esp + 0x1d0], ebx
mov byte [esp + 0x1c0], bl
jb 0x10013b89
mov ecx, dword [esp + 0x188]
push ecx
call fcn.10036530
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x614], 0xf
mov byte [esp + 0x188], bl
mov dword [esp + 0x198], ebx
mov dword [esp + 0x19c], esi
call fcn.10030a0c
lea ecx, [esp + 0x1c]
call fcn.100034e0
cmp dword [esp + 0x1b8], edi
jb 0x10013bd1
mov edx, dword [esp + 0x1a4]
push edx
call fcn.10036530
add esp, 4
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
mov dword [esp + 0x1b4], ebx
mov byte [esp + 0x1a4], bl
mov byte [esp + 0x614], bl
call fcn.1002d9f2
cmp dword [esp + 0x1f0], edi
jb 0x10013c0f
mov eax, dword [esp + 0x1dc]
push eax
call fcn.10036530
add esp, 4
xor al, al
jmp 0x10013d04
lea ecx, [esp + 0x2c]
push ecx
push ebx
push edi
push 0x10012610
push ebx
push ebx
mov dword [esp + 0x44], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [esp + 0x1d4]
mov edi, 0x10
cmp eax, edi
jb 0x10013c4e
mov edx, dword [esp + 0x1c0]
push edx
call fcn.10036530
add esp, 4
cmp dword [esp + 0x19c], edi
mov dword [esp + 0x1d4], esi
mov dword [esp + 0x1d0], ebx
mov byte [esp + 0x1c0], bl
jb 0x10013c7c
mov eax, dword [esp + 0x188]
push eax
call fcn.10036530
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esp + 0x19c], esi
mov dword [esp + 0x198], ebx
mov byte [esp + 0x188], bl
mov byte [esp + 0x614], 0xf
call fcn.10030a0c
lea ecx, [esp + 0x1c]
call fcn.100034e0
cmp dword [esp + 0x1b8], edi
jb 0x10013cc4
mov ecx, dword [esp + 0x1a4]
push ecx
call fcn.10036530
add esp, 4
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
mov dword [esp + 0x1b4], ebx
mov byte [esp + 0x1a4], bl
mov byte [esp + 0x614], bl
call fcn.1002d9f2
cmp dword [esp + 0x1f0], edi
jb 0x10013d02
mov edx, dword [esp + 0x1dc]
push edx
call fcn.10036530
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x60c]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x604]
call fcn.1003fd01
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc