Function at 0x101d879
Capabilities:
Create thread

Disassembly:
mov eax, 0x1031af4
call fcn.01025710
sub esp, 0xa0
push ebx
push esi
push edi
push 0x1007fd8
sub esp, 0x40
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov ecx, esp
push 0
push 0x200
push 0x122
mov edi, 0x1007b08
push edi
mov esi, 0x1007a98
push esi
call fcn.0101170a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.01011772
xor eax, eax
inc eax
mov dword [ebp - 4], eax
xor edx, edx
cmp dword [ebx + 8], edx
jne 0x101da93
cmp dword [ebx + 0x10], eax
jne 0x101da93
lea eax, [ebx + 0xc]
push eax
push 4
push ebx
push 0x101ce18
push edx
push edx
call dword [sym.imp.msvcrt.dll__beginthreadex]
add esp, 0x18
test eax, eax
jne 0x101d9ac
call dword [sym.imp.msvcrt.dll__errno]
push dword [eax]
mov ebx, 0x4000
push 0x1007f88
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push 0
push ebx
push 0x13a
push edi
push esi
call fcn.0101170a
mov byte [ebp - 4], 1
lea eax, [ebp - 0x2c]
push eax
call fcn.01011891
add esp, 0x4c
push 1
push 0
push ebx
push 0x13b
push edi
push esi
lea ecx, [ebp - 0xac]
call fcn.0101170a
mov byte [ebp - 4], 4
push 0
lea ecx, [ebp - 0x6c]
push ecx
mov ecx, eax
call fcn.0101231a
mov esi, eax
mov byte [ebp - 4], 5
call dword [sym.imp.msvcrt.dll__errno]
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [eax]
push ecx
mov ecx, esi
call fcn.0101231a
mov byte [ebp - 4], 5
lea eax, [ebp - 0x2c]
push 0x3008
push eax
call fcn.01011f26
add esp, 0x4c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x6c]
call fcn.0101174b
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xac]
jmp 0x101da72
cmp eax, 0xffffffff
jne 0x101da7c
mov ebx, dword [sym.imp.msvcrt.dll__errno]
call ebx
cmp dword [eax], 0xb
jne 0x101d9cc
mov esi, 0x8007000e
jmp 0x101daca
call ebx
push dword [eax]
mov ebx, 0x4000
push 0x1007f88
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push 0
push ebx
push 0x147
push edi
push esi
call fcn.0101170a
mov byte [ebp - 4], 1
lea eax, [ebp - 0x2c]
push eax
call fcn.01011891
add esp, 0x4c
push 1
push 0
push ebx
push 0x148
push edi
push esi
lea ecx, [ebp - 0x6c]
call fcn.0101170a
mov byte [ebp - 4], 8
push 0xffffffffffffffff
lea ecx, [ebp - 0xac]
push ecx
mov ecx, eax
call fcn.0101231a
mov esi, eax
mov byte [ebp - 4], 9
call dword [sym.imp.msvcrt.dll__errno]
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [eax]
push ecx
mov ecx, esi
call fcn.0101231a
mov byte [ebp - 4], 9
lea eax, [ebp - 0x2c]
push 0x3008
push eax
call fcn.01011f26
add esp, 0x4c
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xac]
call fcn.0101174b
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.0101174b
jmp 0x101d9c2
mov dword [ebx + 8], eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov byte [ebx + 4], al
mov dword [ebx + 0x10], 2
xor esi, esi
jmp 0x101daca
push dword [ebx + 0x10]
push 0x100798c
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push edx
push 0x4000
push 0x127
push edi
push esi
call fcn.0101170a
mov byte [ebp - 4], 1
lea eax, [ebp - 0x2c]
push eax
call fcn.01011891
add esp, 0x4c
mov esi, 0x8000ffff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.01011818
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret