Function at 0x1000eb80
Capabilities:
Create thread

Disassembly:
mov al, byte [0x1007c3b5]
mov edx, dword [0x1007ed88]
push ebx
push ebp
mov ebp, dword [esp + 0x10]
imul edx, ebp
mov byte [0x1007e4e8], al
mov eax, 0x51eb851f
mul edx
push esi
mov esi, edx
mov edx, dword [0x1007efb0]
mov ebx, dword [esp + 0x10]
imul edx, ebp
mov eax, 0x51eb851f
mul edx
push edi
mov edi, edx
xor ecx, ecx
shr esi, 5
shr edi, 5
cmp dword [0x1007ee4c], ecx
je 0x1000ec1c
mov edx, dword [0x1007ee50]
imul edx, ebp
mov eax, 0x51eb851f
mul edx
shr edx, 5
cmp ebx, edx
jae 0x1000ec1c
call fcn.10007540
mov ecx, eax
sub ecx, dword [0x1007e4e4]
cmp ecx, 0x2ee0
jbe 0x1000ec17
push 0
push 0
push 0
push 0x1001cda0
push 0
push 0
mov dword [0x1007e4e4], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 1
cmp dword [0x1007ed8c], 0
je 0x1000ec30
cmp ebx, esi
jae 0x1000ec30
mov ebp, 1
jmp 0x1000ec32
xor ebp, ebp
cmp dword [0x1007efb4], 0
je 0x1000ec46
cmp ebx, edi
jae 0x1000ec46
mov edi, 1
jmp 0x1000ec48
xor edi, edi
test ebp, ebp
jne 0x1000ec54
test edi, edi
je case.default.0x1000ec76
test ecx, ecx
jne case.default.0x1000ec76
call fcn.10007540
push 6
mov esi, eax
call fcn.10007560
add eax, 0xffffffff
cmp eax, 4
ja case.default.0x1000ec76
jmp dword [eax*4 + 0x1000f034]
sub esi, dword [0x1007e4e0]
cmp esi, 0x3e8
jbe case.default.0x1000ec76
cmp dword [0x1007eda8], 0
je 0x1000ecb4
push 0xf424e
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0x3ef
jmp 0x1000ee7c
push 0xe
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0xe
jmp 0x1000ee7c
sub esi, dword [0x1007e4e0]
cmp esi, 0x3e8
jbe case.default.0x1000ec76
cmp dword [0x1007eda8], 0
je 0x1000ed01
push 0xf425a
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0x408
jmp 0x1000ee7c
push 0x1a
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0x1a
jmp 0x1000ee7c
test ebp, ebp
je 0x1000ed4f
mov edx, esi
sub edx, dword [0x1007e4e0]
cmp edx, 0x2710
jbe case.default.0x1000ec76
cmp dword [0x1007eda8], 0
mov dword [0x1007e4e0], esi
je 0x1000ed48
push 0x450
jmp 0x1000ee7c
push 0x24
jmp 0x1000ee7c
test edi, edi
je case.default.0x1000ec76
sub esi, dword [0x1007e4e0]
cmp esi, 0x3e8
jbe case.default.0x1000ec76
cmp dword [0x1007eda8], 0
je 0x1000ed8e
push 0xf429f
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0x45f
jmp 0x1000ee7c
push 0x5f
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0x5f
jmp 0x1000ee7c
sub esi, dword [0x1007e4e0]
cmp esi, 0x3e8
jbe case.default.0x1000ec76
cmp dword [0x1007eda8], 0
je 0x1000eddb
push 0xf427f
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0x431
jmp 0x1000ee7c
push 0x3f
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0xdd
jmp 0x1000ee7c
test ebp, ebp
je 0x1000ee39
sub esi, dword [0x1007e4e0]
cmp esi, 0x3e8
jbe case.default.0x1000ec76
cmp dword [0x1007eda8], 0
je 0x1000ee24
push 0x5f6ac25
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0x471
jmp 0x1000ee7c
push 0x5f6b013
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0xe8
jmp 0x1000ee7c
test edi, edi
je case.default.0x1000ec76
sub esi, dword [0x1007e4e0]
cmp esi, 0x3e8
jbe case.default.0x1000ec76
cmp dword [0x1007eda8], 0
je 0x1000ee69
push 0x5f6ac31
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0x47f
jmp 0x1000ee7c
push 0x5f6b015
call fcn.1002b860
test eax, eax
je case.default.0x1000ec76
push 0xea
call fcn.1002b840
cmp byte [0x1007e4e8], 0
jne 0x1000ee97
cmp dword [0x1007c3f0], 0
je 0x1000efef
xor ebp, ebp
xor ebx, ebx
call fcn.100010d0
cmp eax, 1
je 0x1000ef76
cmp eax, 3
je 0x1000ef76
mov ecx, dword [0x1007ed78]
imul ecx, dword [esp + 0x18]
mov eax, 0x51eb851f
mul ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [0x1007ed90]
shr edx, 5
cmp eax, edx
jae 0x1000ef4c
cmp eax, ebp
jbe 0x1000ef4c
mov eax, 1
cmp byte [0x1007ed7c], bl
jne 0x1000eefa
cmp ecx, ebp
jne 0x1000eefa
cmp dword [0x1007eda4], ebp
jne 0x1000eefa
cmp dword [0x1007ed74], ebp
je 0x1000ef76
cmp eax, ebp
je 0x1000ef76
cmp dword [0x1007c3ec], ebp
jne 0x1000ef76
call fcn.10008080
mov esi, eax
cmp esi, 0xea6c
jne 0x1000eff8
push eax
call fcn.10025240
test eax, eax
jbe 0x1000ef32
mov eax, dword [0x1007ed98]
push eax
call fcn.10023460
test eax, eax
jne 0x1000ef9e
push 0xec1b
call fcn.10025240
test eax, eax
jbe 0x1000ef76
push 0xec1b
call fcn.10025290
jmp 0x1000ef9e
xor eax, eax
cmp ecx, ebp
je 0x1000eede
push ebp
call fcn.10001110
test eax, eax
je 0x1000ef6e
mov edi, 0x10041fe8
mov esi, eax
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x1000ef76
add ebp, 1
cmp ebp, 0x20
jb 0x1000ef52
xor ebp, ebp
cmp dword [0x1007c3f0], ebp
je 0x1000efa3
push 0xea6c
call fcn.10025240
test eax, eax
jbe 0x1000efa3
mov ecx, dword [0x1007ed98]
push ecx
call fcn.10023460
test eax, eax
je 0x1000efa3
mov ebx, 1
cmp ebx, ebp
mov dword [0x1007c3f0], ebp
je 0x1000efb7
mov dword [0x1007c3ec], 1
call fcn.10007540
mov edx, eax
sub edx, dword [0x1007e4dc]
cmp edx, 0x7d0
jbe 0x1000efef
cmp dword [0x1007c3ec], ebp
je 0x1000efef
cmp byte [0x1007ed7e], 0
mov dword [0x1007e4dc], eax
mov dword [0x1007c3ec], ebp
je 0x1000efef
push ebp
push ebp
call fcn.1000eb10
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret 8
cmp esi, 0xec1b
jne 0x1000f00a
push esi
call fcn.10025290
test eax, eax
jne 0x1000ef9e
cmp byte [0x1007ed7c], bl
je 0x1000f01c
push esi
call fcn.10025290
test eax, eax
jne 0x1000ef9e
cmp dword [0x1007ed74], ebp
je 0x1000ef76
call fcn.1001cea0
jmp 0x1000ef9e