Function at 0x1000eb50
Capabilities:
Create thread

Disassembly:
mov al, byte [0x1007c3fd]
mov edx, dword [0x1007ed48]
push ebx
push ebp
mov ebp, dword [esp + 0x10]
imul edx, ebp
mov byte [0x1007e540], al
mov eax, 0x51eb851f
mul edx
push esi
mov esi, edx
mov edx, dword [0x1007ef70]
mov ebx, dword [esp + 0x10]
imul edx, ebp
mov eax, 0x51eb851f
mul edx
push edi
mov edi, edx
xor ecx, ecx
shr esi, 5
shr edi, 5
cmp dword [0x1007ee0c], ecx
je 0x1000ebec
mov edx, dword [0x1007ee10]
imul edx, ebp
mov eax, 0x51eb851f
mul edx
shr edx, 5
cmp ebx, edx
jae 0x1000ebec
call fcn.10007840
mov ecx, eax
sub ecx, dword [0x1007e53c]
cmp ecx, 0x2ee0
jbe 0x1000ebe7
push 0
push 0
push 0
push 0x1001d740
push 0
push 0
mov dword [0x1007e53c], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 1
cmp dword [0x1007ed4c], 0
je 0x1000ec00
cmp ebx, esi
jae 0x1000ec00
mov ebp, 1
jmp 0x1000ec02
xor ebp, ebp
cmp dword [0x1007ef74], 0
je 0x1000ec16
cmp ebx, edi
jae 0x1000ec16
mov edi, 1
jmp 0x1000ec18
xor edi, edi
test ebp, ebp
jne 0x1000ec24
test edi, edi
je case.default.0x1000ec46
test ecx, ecx
jne case.default.0x1000ec46
call fcn.10007840
push 6
mov esi, eax
call fcn.10007860
add eax, 0xffffffff
cmp eax, 4
ja case.default.0x1000ec46
jmp dword [eax*4 + 0x1000f004]
sub esi, dword [0x1007e538]
cmp esi, 0x3e8
jbe case.default.0x1000ec46
cmp dword [0x1007ed68], 0
je 0x1000ec84
push 0xf424e
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0x3ef
jmp 0x1000ee4c
push 0xe
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0xe
jmp 0x1000ee4c
sub esi, dword [0x1007e538]
cmp esi, 0x3e8
jbe case.default.0x1000ec46
cmp dword [0x1007ed68], 0
je 0x1000ecd1
push 0xf425a
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0x408
jmp 0x1000ee4c
push 0x1a
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0x1a
jmp 0x1000ee4c
test ebp, ebp
je 0x1000ed1f
mov edx, esi
sub edx, dword [0x1007e538]
cmp edx, 0x2710
jbe case.default.0x1000ec46
cmp dword [0x1007ed68], 0
mov dword [0x1007e538], esi
je 0x1000ed18
push 0x450
jmp 0x1000ee4c
push 0x24
jmp 0x1000ee4c
test edi, edi
je case.default.0x1000ec46
sub esi, dword [0x1007e538]
cmp esi, 0x3e8
jbe case.default.0x1000ec46
cmp dword [0x1007ed68], 0
je 0x1000ed5e
push 0xf429f
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0x45f
jmp 0x1000ee4c
push 0x5f
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0x5f
jmp 0x1000ee4c
sub esi, dword [0x1007e538]
cmp esi, 0x3e8
jbe case.default.0x1000ec46
cmp dword [0x1007ed68], 0
je 0x1000edab
push 0xf427f
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0x431
jmp 0x1000ee4c
push 0x3f
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0xdd
jmp 0x1000ee4c
test ebp, ebp
je 0x1000ee09
sub esi, dword [0x1007e538]
cmp esi, 0x3e8
jbe case.default.0x1000ec46
cmp dword [0x1007ed68], 0
je 0x1000edf4
push 0x5f6ac25
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0x471
jmp 0x1000ee4c
push 0x5f6b013
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0xe8
jmp 0x1000ee4c
test edi, edi
je case.default.0x1000ec46
sub esi, dword [0x1007e538]
cmp esi, 0x3e8
jbe case.default.0x1000ec46
cmp dword [0x1007ed68], 0
je 0x1000ee39
push 0x5f6ac31
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0x47f
jmp 0x1000ee4c
push 0x5f6b015
call fcn.1002c170
test eax, eax
je case.default.0x1000ec46
push 0xea
call fcn.1002c560
cmp byte [0x1007e540], 0
jne 0x1000ee67
cmp dword [0x1007c438], 0
je 0x1000efbf
xor ebp, ebp
xor ebx, ebx
call fcn.100010d0
cmp eax, 1
je 0x1000ef46
cmp eax, 3
je 0x1000ef46
mov ecx, dword [0x1007ed38]
imul ecx, dword [esp + 0x18]
mov eax, 0x51eb851f
mul ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [0x1007ed50]
shr edx, 5
cmp eax, edx
jae 0x1000ef1c
cmp eax, ebp
jbe 0x1000ef1c
mov eax, 1
cmp byte [0x1007ed3c], bl
jne 0x1000eeca
cmp ecx, ebp
jne 0x1000eeca
cmp dword [0x1007ed64], ebp
jne 0x1000eeca
cmp dword [0x1007ed34], ebp
je 0x1000ef46
cmp eax, ebp
je 0x1000ef46
cmp dword [0x1007c434], ebp
jne 0x1000ef46
call fcn.10008380
mov esi, eax
cmp esi, 0xea6c
jne 0x1000efc8
push eax
call fcn.10025a30
test eax, eax
jbe 0x1000ef02
mov eax, dword [0x1007ed58]
push eax
call fcn.10023820
test eax, eax
jne 0x1000ef6e
push 0xec1b
call fcn.10025a30
test eax, eax
jbe 0x1000ef46
push 0xec1b
call fcn.10025a80
jmp 0x1000ef6e
xor eax, eax
cmp ecx, ebp
je 0x1000eeae
push ebp
call fcn.10001110
test eax, eax
je 0x1000ef3e
mov edi, 0x10043320
mov esi, eax
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x1000ef46
add ebp, 1
cmp ebp, 0x20
jb 0x1000ef22
xor ebp, ebp
cmp dword [0x1007c438], ebp
je 0x1000ef73
push 0xea6c
call fcn.10025a30
test eax, eax
jbe 0x1000ef73
mov ecx, dword [0x1007ed58]
push ecx
call fcn.10023820
test eax, eax
je 0x1000ef73
mov ebx, 1
cmp ebx, ebp
mov dword [0x1007c438], ebp
je 0x1000ef87
mov dword [0x1007c434], 1
call fcn.10007840
mov edx, eax
sub edx, dword [0x1007e534]
cmp edx, 0x7d0
jbe 0x1000efbf
cmp dword [0x1007c434], ebp
je 0x1000efbf
cmp byte [0x1007ed3e], 0
mov dword [0x1007e534], eax
mov dword [0x1007c434], ebp
je 0x1000efbf
push ebp
push ebp
call fcn.1000eae0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 8
cmp esi, 0xec1b
jne 0x1000efda
push esi
call fcn.10025a80
test eax, eax
jne 0x1000ef6e
cmp byte [0x1007ed3c], bl
je 0x1000efec
push esi
call fcn.10025a80
test eax, eax
jne 0x1000ef6e
cmp dword [0x1007ed34], ebp
je 0x1000ef46
call fcn.1001d840
jmp 0x1000ef6e