Function at 0x1002e610
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1017c140
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x101df230]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x48], ecx
call fcn.1003d555
test al, al
je 0x1002e65f
pop edi
push ebp
push ecx
pop ebx
push ebp
push eax
pop esp
push eax
push edx
pop esi
pop esp
pop esi
pop esi
pop eax
pop ebp
push edi
push edi
pop eax
pop ecx
pop esp
pop ecx
push ebx
pop edi
push ebx
call fcn.1003d59a
test al, al
je 0x1002e681
push ebp
push edi
push eax
pop edi
pop eax
push esp
push esp
push ebx
push esi
push esi
pop edx
push ecx
push ebp
pop eax
push edx
pop edx
push ebx
pop ebp
push edi
pop ecx
push edx
pop edx
pop esi
pop ebx
pop esi
call fcn.1003dab9
test al, al
je 0x1002e69c
push edx
push edi
push esi
pop ecx
pop esi
pop ebx
pop edi
pop edi
pop ebp
push edx
push edi
pop edx
push edi
pop eax
push ecx
pop ebx
pop ebx
pop edi
mov edi, dword [ebp - 0x48]
cmp dword [edi + 0x38], 0
jne 0x1002e729
lea ecx, [ebp - 0x41]
call fcn.10039fd0
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x41]
call fcn.10044c6a
mov ebx, eax
lea esi, [edi + 0x28]
cmp esi, ebx
je 0x1002e705
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x1002e6e0
inc eax
mov ecx, esi
push eax
push dword [esi]
call fcn.10023bd0
mov dword [esi + 0x14], 0xf
cmp dword [esi + 0x14], 0x10
mov dword [esi + 0x10], 0
jb 0x1002e6f8
mov eax, dword [esi]
jmp 0x1002e6fa
mov eax, esi
push ebx
mov ecx, esi
mov byte [eax], 0
call fcn.1002af20
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1002e71a
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.10023bd0
lea ecx, [ebp - 0x41]
mov dword [ebp - 4], 0xffffffff
call fcn.10023390
cmp dword [edi + 0x68], 0
jne 0x1002e7f1
push 0xa
xor eax, eax
mov dword [ebp - 0x2c], 7
push 0x1017fb84
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.10020030
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10041618
add esp, 8
lea esi, [edi + 0x58]
mov ebx, eax
cmp esi, ebx
je 0x1002e7ae
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x1002e789
inc eax
mov ecx, esi
push eax
push dword [esi]
call fcn.10023bd0
mov dword [esi + 0x14], 0xf
cmp dword [esi + 0x14], 0x10
mov dword [esi + 0x10], 0
jb 0x1002e7a1
mov eax, dword [esi]
jmp 0x1002e7a3
mov eax, esi
push ebx
mov ecx, esi
mov byte [eax], 0
call fcn.1002af20
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1002e7c3
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.10023bd0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x1002e7f1
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.10020130
call fcn.1003d891
test al, al
je 0x1002e81c
pop eax
push ebp
pop esi
push ebx
pop esi
pop eax
push esi
push eax
push ebp
push ebp
push esp
push eax
push ebp
push ebx
push esp
push esp
pop edi
push eax
push edi
pop esp
push ecx
pop eax
pop ebx
pop edx
push ecx
push ebx
push ebp
pop ebx
pop edx
push esp
pop ebp
mov edi, dword [ebp - 0x48]
call fcn.1003d6f3
test al, al
je 0x1002e836
pop ebx
pop esi
push edx
pop eax
pop eax
push esp
push ecx
push ebx
push ebx
pop eax
push esi
pop esi
push ebx
pop ebp
push esp
push edi
push eax
cmp dword [edi + 0x80], 0
jne 0x1002e901
push 7
xor eax, eax
mov dword [ebp - 0x2c], 7
push str.1.6.1.3
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.10020030
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10041618
add esp, 8
lea esi, [edi + 0x70]
mov ebx, eax
cmp esi, ebx
je 0x1002e8be
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x1002e899
inc eax
mov ecx, esi
push eax
push dword [esi]
call fcn.10023bd0
mov dword [esi + 0x14], 0xf
cmp dword [esi + 0x14], 0x10
mov dword [esi + 0x10], 0
jb 0x1002e8b1
mov eax, dword [esi]
jmp 0x1002e8b3
mov eax, esi
push ebx
mov ecx, esi
mov byte [eax], 0
call fcn.1002af20
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1002e8d3
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.10023bd0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x1002e901
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.10020130
call fcn.1003d6f3
test al, al
je 0x1002e91a
push ecx
pop eax
push ebp
pop ebx
push ebp
push edx
pop edx
pop esp
pop ebp
push edx
push ebx
push ebp
pop eax
push esp
pop ebx
pop edx
cmp dword [edi + 0x98], 0
jne 0x1002e9aa
lea ecx, [ebp - 0x34]
call fcn.10049b4a
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 6
push eax
lea ecx, [ebp - 0x34]
call fcn.1004e266
mov ebx, eax
lea esi, [edi + 0x88]
cmp esi, ebx
je 0x1002e986
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x1002e961
inc eax
mov ecx, esi
push eax
push dword [esi]
call fcn.10023bd0
mov dword [esi + 0x14], 0xf
cmp dword [esi + 0x14], 0x10
mov dword [esi + 0x10], 0
jb 0x1002e979
mov eax, dword [esi]
jmp 0x1002e97b
mov eax, esi
push ebx
mov ecx, esi
mov byte [eax], 0
call fcn.1002af20
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1002e99b
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.10023bd0
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xffffffff
call fcn.10023390
cmp dword [edi + 0x50], 0
jne 0x1002ea13
lea eax, [ebp - 0x40]
push eax
call fcn.10023310
mov ecx, eax
call fcn.100308d0
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 8
push eax
call fcn.10041618
add esp, 8
lea ecx, [edi + 0x40]
push eax
call fcn.1002a440
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1002e9f2
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.10023bd0
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1001fe90
call fcn.1003d624
test al, al
je 0x1002ea39
pop edi
pop ebx
push esp
push ecx
pop ecx
pop edi
pop eax
pop eax
pop esi
push edi
push esp
push eax
push esp
push edi
push ecx
push esp
push edi
push esi
push ebp
pop esi
push ebx
pop eax
pop edi
pop edx
push esp
push ecx
mov edi, dword [ebp - 0x48]
cmp dword [ebp + 8], 0
je 0x1002ea5b
lea eax, [ebp - 0x4c]
mov byte [edi], 1
push eax
push 0
push edi
push 0x1002e250
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 8], eax
call fcn.1003dab9
test al, al
je 0x1002ea78
pop ebp
push ebx
push ebx
pop ecx
pop edx
pop eax
push ecx
pop ebp
pop edx
pop ecx
push edx
pop edx
pop ebx
pop edi
push edi
pop ebp
pop ecx
pop eax
pop edx
push edi
call fcn.1003d84c
test al, al
je 0x1002ea98
push edi
push ebx
push ebx
push edi
push ebp
pop edi
pop edi
pop ebx
pop edi
push esi
push ebx
pop ecx
pop eax
pop esp
push ecx
push eax
push esi
pop eax
push eax
pop edx
pop esi
push edi
pop esp
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10031bc0
mov esp, ebp
pop ebp
ret 4