Function at 0x1000f2e0
Capabilities:
Create thread

Disassembly:
mov al, byte [0x1007f3b5]
mov edx, dword [0x10081d88]
push ebx
push ebp
mov ebp, dword [esp + 0x10]
imul edx, ebp
mov byte [0x100814e8], al
mov eax, 0x51eb851f
mul edx
push esi
mov esi, edx
mov edx, dword [0x10081fb0]
mov ebx, dword [esp + 0x10]
imul edx, ebp
mov eax, 0x51eb851f
mul edx
push edi
mov edi, edx
xor ecx, ecx
shr esi, 5
shr edi, 5
cmp dword [0x10081e4c], ecx
je 0x1000f37c
mov edx, dword [0x10081e50]
imul edx, ebp
mov eax, 0x51eb851f
mul edx
shr edx, 5
cmp ebx, edx
jae 0x1000f37c
call fcn.10007c40
mov ecx, eax
sub ecx, dword [0x100814e4]
cmp ecx, 0x2ee0
jbe 0x1000f377
push 0
push 0
push 0
push 0x1001d6b0
push 0
push 0
mov dword [0x100814e4], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 1
cmp dword [0x10081d8c], 0
je 0x1000f390
cmp ebx, esi
jae 0x1000f390
mov ebp, 1
jmp 0x1000f392
xor ebp, ebp
cmp dword [0x10081fb4], 0
je 0x1000f3a6
cmp ebx, edi
jae 0x1000f3a6
mov edi, 1
jmp 0x1000f3a8
xor edi, edi
test ebp, ebp
jne 0x1000f3b4
test edi, edi
je case.default.0x1000f3d6
test ecx, ecx
jne case.default.0x1000f3d6
call fcn.10007c40
push 6
mov esi, eax
call fcn.10007c60
add eax, 0xffffffff
cmp eax, 4
ja case.default.0x1000f3d6
jmp dword [eax*4 + 0x1000f794]
sub esi, dword [0x100814e0]
cmp esi, 0x3e8
jbe case.default.0x1000f3d6
cmp dword [0x10081da8], 0
je 0x1000f414
push 0xf424e
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0x3ef
jmp 0x1000f5dc
push 0xe
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0xe
jmp 0x1000f5dc
sub esi, dword [0x100814e0]
cmp esi, 0x3e8
jbe case.default.0x1000f3d6
cmp dword [0x10081da8], 0
je 0x1000f461
push 0xf425a
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0x408
jmp 0x1000f5dc
push 0x1a
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0x1a
jmp 0x1000f5dc
test ebp, ebp
je 0x1000f4af
mov edx, esi
sub edx, dword [0x100814e0]
cmp edx, 0x2710
jbe case.default.0x1000f3d6
cmp dword [0x10081da8], 0
mov dword [0x100814e0], esi
je 0x1000f4a8
push 0x450
jmp 0x1000f5dc
push 0x24
jmp 0x1000f5dc
test edi, edi
je case.default.0x1000f3d6
sub esi, dword [0x100814e0]
cmp esi, 0x3e8
jbe case.default.0x1000f3d6
cmp dword [0x10081da8], 0
je 0x1000f4ee
push 0xf429f
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0x45f
jmp 0x1000f5dc
push 0x5f
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0x5f
jmp 0x1000f5dc
sub esi, dword [0x100814e0]
cmp esi, 0x3e8
jbe case.default.0x1000f3d6
cmp dword [0x10081da8], 0
je 0x1000f53b
push 0xf427f
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0x431
jmp 0x1000f5dc
push 0x3f
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0xdd
jmp 0x1000f5dc
test ebp, ebp
je 0x1000f599
sub esi, dword [0x100814e0]
cmp esi, 0x3e8
jbe case.default.0x1000f3d6
cmp dword [0x10081da8], 0
je 0x1000f584
push 0x5f6ac25
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0x471
jmp 0x1000f5dc
push 0x5f6b013
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0xe8
jmp 0x1000f5dc
test edi, edi
je case.default.0x1000f3d6
sub esi, dword [0x100814e0]
cmp esi, 0x3e8
jbe case.default.0x1000f3d6
cmp dword [0x10081da8], 0
je 0x1000f5c9
push 0x5f6ac31
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0x47f
jmp 0x1000f5dc
push 0x5f6b015
call fcn.1002c5c0
test eax, eax
je case.default.0x1000f3d6
push 0xea
call fcn.1002c980
cmp byte [0x100814e8], 0
jne 0x1000f5f7
cmp dword [0x1007f3f0], 0
je 0x1000f74f
xor ebp, ebp
xor ebx, ebx
call fcn.100010d0
cmp eax, 1
je 0x1000f6d6
cmp eax, 3
je 0x1000f6d6
mov ecx, dword [0x10081d78]
imul ecx, dword [esp + 0x18]
mov eax, 0x51eb851f
mul ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [0x10081d90]
shr edx, 5
cmp eax, edx
jae 0x1000f6ac
cmp eax, ebp
jbe 0x1000f6ac
mov eax, 1
cmp byte [0x10081d7c], bl
jne 0x1000f65a
cmp ecx, ebp
jne 0x1000f65a
cmp dword [0x10081da4], ebp
jne 0x1000f65a
cmp dword [0x10081d74], ebp
je 0x1000f6d6
cmp eax, ebp
je 0x1000f6d6
cmp dword [0x1007f3ec], ebp
jne 0x1000f6d6
call fcn.10008780
mov esi, eax
cmp esi, 0xea6c
jne 0x1000f758
push eax
call fcn.10025e50
test eax, eax
jbe 0x1000f692
mov eax, dword [0x10081d98]
push eax
call fcn.10023cd0
test eax, eax
jne 0x1000f6fe
push 0xec1b
call fcn.10025e50
test eax, eax
jbe 0x1000f6d6
push 0xec1b
call fcn.10025ea0
jmp 0x1000f6fe
xor eax, eax
cmp ecx, ebp
je 0x1000f63e
push ebp
call fcn.10001110
test eax, eax
je 0x1000f6ce
mov edi, 0x10043238
mov esi, eax
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x1000f6d6
add ebp, 1
cmp ebp, 0x20
jb 0x1000f6b2
xor ebp, ebp
cmp dword [0x1007f3f0], ebp
je 0x1000f703
push 0xea6c
call fcn.10025e50
test eax, eax
jbe 0x1000f703
mov ecx, dword [0x10081d98]
push ecx
call fcn.10023cd0
test eax, eax
je 0x1000f703
mov ebx, 1
cmp ebx, ebp
mov dword [0x1007f3f0], ebp
je 0x1000f717
mov dword [0x1007f3ec], 1
call fcn.10007c40
mov edx, eax
sub edx, dword [0x100814dc]
cmp edx, 0x7d0
jbe 0x1000f74f
cmp dword [0x1007f3ec], ebp
je 0x1000f74f
cmp byte [0x10081d7e], 0
mov dword [0x100814dc], eax
mov dword [0x1007f3ec], ebp
je 0x1000f74f
push ebp
push ebp
call fcn.1000f270
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 8
cmp esi, 0xec1b
jne 0x1000f76a
push esi
call fcn.10025ea0
test eax, eax
jne 0x1000f6fe
cmp byte [0x10081d7c], bl
je 0x1000f77c
push esi
call fcn.10025ea0
test eax, eax
jne 0x1000f6fe
cmp dword [0x10081d74], ebp
je 0x1000f6d6
call fcn.1001d7b0
jmp 0x1000f6fe