Function at 0x101f4e5
Capabilities:
Create thread

Disassembly:
mov eax, 0x1034e3d
call fcn.01027f58
sub esp, 0xa0
push ebx
push esi
push edi
push 0x1007f10
sub esp, 0x40
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov ecx, esp
push 0
push 0x200
push 0x122
mov edi, 0x1007a48
push edi
mov esi, 0x10079e0
push esi
call fcn.01011a74
and dword [ebp - 4], 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.01011ae8
xor eax, eax
inc eax
mov dword [ebp - 4], eax
xor edx, edx
cmp dword [ebx + 8], edx
jne 0x101f713
cmp dword [ebx + 0x10], eax
jne 0x101f713
lea eax, [ebx + 0xc]
push eax
push 4
push ebx
push 0x101e9b9
push edx
push edx
call dword [sym.imp.msvcrt.dll__beginthreadex]
add esp, 0x18
test eax, eax
jne 0x101f624
call dword [sym.imp.msvcrt.dll__errno]
push dword [eax]
mov ebx, 0x4000
push 0x1007ec0
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push 0
push ebx
push 0x13a
push edi
push esi
call fcn.01011a74
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 1
call fcn.01011c0f
add esp, 0x4c
push 1
push 0
push ebx
push 0x13b
push edi
push esi
lea ecx, [ebp - 0xac]
call fcn.01011a74
mov byte [ebp - 4], 4
push 0
lea ecx, [ebp - 0x6c]
push ecx
mov ecx, eax
call fcn.0101277a
mov esi, eax
mov byte [ebp - 4], 5
call dword [sym.imp.msvcrt.dll__errno]
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [eax]
push ecx
mov ecx, esi
call fcn.0101277a
mov byte [ebp - 4], 6
push 0x3008
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 5
call fcn.0101232e
add esp, 0x4c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x6c]
call fcn.01011abc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xac]
jmp 0x101f6f2
cmp eax, 0xffffffff
jne 0x101f6fc
mov ebx, dword [sym.imp.msvcrt.dll__errno]
call ebx
cmp dword [eax], 0xb
jne 0x101f644
mov esi, 0x8007000e
jmp 0x101f74e
call ebx
push dword [eax]
mov ebx, 0x4000
push 0x1007ec0
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push 0
push ebx
push 0x147
push edi
push esi
call fcn.01011a74
mov byte [ebp - 4], 7
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 1
call fcn.01011c0f
add esp, 0x4c
push 1
push 0
push ebx
push 0x148
push edi
push esi
lea ecx, [ebp - 0x6c]
call fcn.01011a74
mov byte [ebp - 4], 8
push 0xffffffffffffffff
lea ecx, [ebp - 0xac]
push ecx
mov ecx, eax
call fcn.0101277a
mov esi, eax
mov byte [ebp - 4], 9
call dword [sym.imp.msvcrt.dll__errno]
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [eax]
push ecx
mov ecx, esi
call fcn.0101277a
mov byte [ebp - 4], 0xa
push 0x3008
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 9
call fcn.0101232e
add esp, 0x4c
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xac]
call fcn.01011abc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.01011abc
jmp 0x101f63a
mov dword [ebx + 8], eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov byte [ebx + 4], al
mov dword [ebx + 0x10], 2
xor esi, esi
jmp 0x101f74e
push dword [ebx + 0x10]
push 0x10078d4
sub esp, 0x40
mov ecx, esp
mov dword [ebp - 0x10], esp
push edx
push 0x4000
push 0x127
push edi
push esi
call fcn.01011a74
mov byte [ebp - 4], 2
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 1
call fcn.01011c0f
add esp, 0x4c
mov esi, 0x8000ffff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.01011b91
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret