Function at 0x1000e870
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1017b957
mov eax, dword fs:[0]
push eax
mov eax, 0x29c8
call fcn.100a7a90
mov eax, dword [0x101e3070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
call fcn.1015ba74
push eax
call fcn.101573d8
add esp, 8
mov byte [0x10200464], 0
mov ecx, 0x101ffe18
call fcn.1000e690
mov eax, dword [0x10200254]
lea ecx, [ebp - 0x298c]
mov dword [ebp - 0x2978], 7
mov dword [ebp - 0x297c], 0
mov dword [eax + 0xc], 7
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 2
xor eax, eax
push eax
push 0x101d41c4
mov word [ebp - 0x298c], ax
call fcn.10005450
mov ecx, dword [0x10200254]
add ecx, 0x8b8
mov dword [ebp - 4], 0
lea eax, [ebp - 0x298c]
cmp ecx, eax
je 0x1000e931
push 0xffffffffffffffff
push 0
push eax
call fcn.10005550
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2978]
cmp eax, 8
jb 0x1000e956
inc eax
lea ecx, [ebp - 0x298c]
push eax
push dword [ebp - 0x298c]
call fcn.10005bc0
mov esi, dword [0x10200254]
lea eax, [ebp - 0x1fb4]
push eax
lea eax, [ebp - 0x1fb8]
mov dword [ebp - 0x1fbc], 0
push eax
lea eax, [ebp - 0x1fbc]
mov dword [ebp - 0x1fb8], 0
push eax
push str._d._d._d
push 0x10200230
mov dword [ebp - 0x1fb4], 0
call fcn.100011f0
add esp, 0x14
cmp eax, 3
jne 0x1000e9c1
mov eax, dword [ebp - 0x1fbc]
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 0x1fb8]
mov dword [esi + 0x1c], eax
mov eax, dword [ebp - 0x1fb4]
mov dword [esi + 0x20], eax
xor eax, eax
mov dword [ebp - 0x2990], 7
push eax
push 0x101d41c4
lea ecx, [ebp - 0x29a4]
mov dword [ebp - 0x2994], 0
mov word [ebp - 0x29a4], ax
call fcn.10005450
mov ecx, dword [0x10200254]
add ecx, 0x8d0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x29a4]
cmp ecx, eax
je 0x1000ea16
push 0xffffffffffffffff
push 0
push eax
call fcn.10005550
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2990]
cmp eax, 8
jb 0x1000ea3b
inc eax
lea ecx, [ebp - 0x29a4]
push eax
push dword [ebp - 0x29a4]
call fcn.10005bc0
mov ecx, 0x101ffe30
call fcn.10011fe0
mov esi, eax
mov dword [ebp - 0x29a8], 7
xor eax, eax
mov dword [ebp - 0x29ac], 0
mov word [ebp - 0x29bc], ax
cmp word [esi], ax
jne 0x1000ea6d
xor ecx, ecx
jmp 0x1000ea81
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000ea72
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x29bc]
call fcn.10005450
mov ecx, dword [0x10200254]
add ecx, 0x8e8
mov dword [ebp - 4], 2
lea eax, [ebp - 0x29bc]
cmp ecx, eax
je 0x1000eab5
push 0xffffffffffffffff
push 0
push eax
call fcn.10005550
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x29a8]
cmp eax, 8
jb 0x1000eada
inc eax
lea ecx, [ebp - 0x29bc]
push eax
push dword [ebp - 0x29bc]
call fcn.10005bc0
push esi
call fcn.1015bd72
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
cmp byte [0x10200464], 0
je 0x1000ec17
push 0x9b8
lea eax, [ebp - 0x2974]
push 0
push eax
call fcn.10154a20
add esp, 0xc
lea ecx, [ebp - 0x2974]
call fcn.10015510
push str.09F774B22DBC7417259398F6D33A4582
lea ecx, [ebp - 0x29d4]
mov dword [ebp - 4], 3
call fcn.10005260
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x29d4]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.100057d0
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x29c0]
cmp eax, 0x10
jb 0x1000eb6a
inc eax
lea ecx, [ebp - 0x29d4]
push eax
push dword [ebp - 0x29d4]
call fcn.10005c20
lea ecx, [ebp - 0x2974]
call fcn.100157c0
test eax, eax
jle 0x1000ec05
nop dword [eax]
push 0x1fa0
lea eax, [ebp - 0x1fb0]
push 0
push eax
call fcn.10154a20
sub esp, 0xc
mov dword [ebp - 0x1fb4], 0x4dbe
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
cmp dword [ecx + 0x14], 0x10
jb 0x1000ebba
mov eax, dword [ecx]
jmp 0x1000ebbc
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x1fd4]
push 0
push eax
call fcn.100057d0
lea eax, [ebp - 0x1fb0]
mov edx, 4
push 0x1fa0
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.10015440
add esp, 0x20
push 0x64
call edi
lea ecx, [ebp - 0x2974]
call fcn.100157c0
test eax, eax
jg 0x1000eb80
lea ecx, [ebp - 0x2974]
mov dword [ebp - 4], 0xffffffff
call fcn.10015680
mov ecx, dword [0x1020024c]
call fcn.1000aa40
test eax, eax
jle 0x1000ec57
call fcn.1000e780
mov esi, dword [0x10200250]
push 0
push 0
push esi
push 0x1000f4a0
push 0x4b960
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 8], eax
push ecx
mov ecx, dword [0x10200248]
call fcn.10004fb0
cmp byte [0x10200464], 0
je 0x1000ec9b
sub esp, 0x18
mov ecx, esp
push 0x20
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.09F774B22DBC7417259398F6D33A4582
mov byte [ecx], 0
call fcn.100056d0
mov ecx, dword [0x10200254]
call fcn.10016040
cmp eax, 0xa
jg 0x1000eca4
push 0x2710
call edi
jmp 0x1000ec57
push 0xea60
call edi
jmp 0x1000ec57
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100a66bf
mov esp, ebp
pop ebp
ret 8