Function at 0xeb740
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x11c357
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x13206c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0xa0], eax
cmp byte [eax + 8], 0
je 0xebc9e
lea ecx, [ebp - 0x94]
call fcn.000e9560
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
mov edx, 6
cmp dword [eax + 0x14], edx
cmovl edx, dword [eax + 0x14]
push edx
push 0
push ecx
mov ecx, eax
call fcn.000cf620
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 3
call fcn.000ced70
mov edi, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x28]
test edi, edi
je 0xeb83b
nop word [eax + eax]
cmp edx, 8
lea eax, [ebp - 0x28]
cmovae eax, esi
movzx eax, word [eax + ecx*2]
cmp eax, 0x30
jb 0xeb7e7
cmp eax, 0x39
jbe 0xeb7fa
cmp eax, 0x41
jb 0xeb7f1
cmp eax, 0x5a
jbe 0xeb7fa
add eax, 0xffffff9f
cmp ax, 0x19
ja 0xeb801
inc ecx
cmp ecx, edi
jb 0xeb7d0
jmp 0xeb83b
push 0x12a544
lea ecx, [ebp - 0x78]
call fcn.000ce7f0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x74]
cmp dword [ebp - 0x60], 8
lea ecx, [ebp - 0x28]
push dword [ebp - 0x64]
cmovae eax, dword [ebp - 0x74]
push eax
call fcn.000d1370
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 3
call fcn.000ced70
mov edx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x28]
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x98], 0
cmp edx, 8
lea eax, [ebp - 0x28]
push ecx
cmovae eax, esi
push 0x129bf0
push eax
call fcn.000ce020
push 0
call fcn.000fa7bb
add eax, dword [ebp - 0x98]
push eax
call fcn.000fae91
add esp, 0x14
call fcn.000fae70
cdq
mov ecx, 0x12c
idiv ecx
mov esi, 0xe10
add edx, 0xa
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xa4], edx
call fcn.000eb370
test al, al
jne 0xebc96
mov ecx, dword [ebp - 0xa0]
mov ebx, dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
lea eax, [ecx + 0x30]
mov dword [ebp - 0xa8], eax
lea edi, [ecx + 0x24]
nop dword [eax]
cmp esi, 0xe10
jl 0xeb8cd
call fcn.000eca40
mov eax, dword [ebp - 0xa4]
xor esi, esi
cmp dword [ebp - 0x98], 0xe10
cmovl esi, dword [ebp - 0x98]
test eax, eax
jle 0xeb90c
imul eax, eax, 0x3e8
push eax
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
mov eax, dword [ebp - 0xa4]
add eax, esi
mov dword [ebp - 0xa4], 0
jmp 0xeb91e
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x493e0
call eax
lea eax, [esi + 0x12c]
mov dword [ebp - 0x98], eax
mov ecx, dword [edi + 4]
xor esi, esi
mov edx, dword [edi]
mov eax, ecx
sub eax, edx
sar eax, 2
test eax, eax
je 0xeb970
nop word [eax + eax]
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0
push eax
push dword [edx + esi*4]
call ebx
cmp dword [ebp - 0x9c], 1
je 0xeb989
mov ecx, dword [edi + 4]
inc esi
mov edx, dword [edi]
mov eax, ecx
sub eax, edx
sar eax, 2
cmp esi, eax
jb 0xeb940
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
sub ecx, dword [edi]
sar ecx, 2
cmp ecx, 2
jb 0xeb9c4
push 0x2710
call esi
jmp 0xeb924
mov eax, dword [edi]
shl esi, 2
push dword [esi + eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [edi]
mov edx, dword [edi + 4]
add eax, esi
lea ecx, [eax + 4]
sub edx, ecx
push edx
push ecx
push eax
call fcn.000f3730
add dword [edi + 4], 0xfffffffc
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1388
call esi
mov ecx, dword [edi + 4]
jmp 0xeb976
mov eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x5c]
push dword [eax + 0x4c]
push dword [ebp - 0xa8]
call fcn.000e5020
mov byte [ebp - 4], 5
push 0x30
mov dword [ebp - 0x5c], 0x12a370
call fcn.000f178c
add esp, 4
mov dword [ebp - 0xac], eax
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.000e33f0
mov byte [ebp - 4], 5
mov dword [ebp - 0x54], eax
call fcn.000e8090
push 0
push 0x13329c
push 0x133114
push 0
push dword [ebp - 0x54]
mov esi, eax
call fcn.001181bd
add esp, 0x14
mov dword [eax + 0x28], esi
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 7
call fcn.000e4f90
push 0
push 0x13327c
push 0x133134
push 0
push dword [ebp - 0x50]
call fcn.001181bd
add esp, 0x14
test eax, eax
je 0xebc50
push 0
push 0x13327c
push 0x133134
push 0
push dword [ebp - 0x50]
call fcn.001181bd
add esp, 0x14
cmp dword [eax + 0x14], 0
jle 0xebc50
push 0
push 0x13327c
push 0x133134
push 0
push dword [ebp - 0x50]
call fcn.001181bd
add esp, 0x14
cmp word [eax + 0x1a], 0
jle 0xebc50
push 0
push 0x13327c
push 0x133134
push 0
push dword [ebp - 0x50]
call fcn.001181bd
add esp, 0x14
cmp dword [eax + 0x30], 0
je 0xebc50
push 0
push 0x1330d4
push 0x133134
push 0
push dword [ebp - 0x50]
call fcn.001181bd
add esp, 0x14
cmp byte [eax + 0x10], 1
jne 0xebc50
push 0
push 0x13327c
push 0x133134
push 0
push dword [ebp - 0x50]
call fcn.001181bd
push 0x64
mov dword [ebp - 0x9c], eax
call fcn.000f178c
mov esi, eax
add esp, 0x18
mov dword [ebp - 0xb0], esi
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.000eb2b0
mov eax, dword [ebp - 0xa0]
xor ecx, ecx
inc dword [0x134754]
add eax, 0x34
mov dword [esi + 0x40], 0
mov dword [esi + 0x44], 0x129c14
mov dword [esi + 0x58], 0
mov dword [esi + 0x5c], 7
mov word [esi + 0x48], cx
mov dword [esi + 0x60], ecx
lea ecx, [esi + 4]
mov byte [ebp - 4], 7
cmp ecx, eax
je 0xebb70
cmp dword [eax + 0x14], 8
mov edx, eax
jb 0xebb67
mov edx, dword [eax]
push dword [eax + 0x10]
push edx
call fcn.000d1370
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ecx + 0x4c]
mov dword [esi + 0x1c], eax
lea eax, [ecx + 0x54]
lea ecx, [esi + 0x24]
cmp ecx, eax
je 0xebb99
cmp dword [eax + 0x14], 8
mov edx, eax
jb 0xebb90
mov edx, dword [eax]
push dword [eax + 0x10]
push edx
call fcn.000d1370
mov eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x78]
mov edx, dword [ebp - 0x9c]
mov eax, dword [eax + 0x6c]
mov dword [esi + 0x3c], eax
mov eax, dword [edx + 0x14]
add edx, 0x20
mov dword [esi + 0x40], eax
call fcn.000ce620
add eax, 4
mov byte [ebp - 4], 9
lea ecx, [esi + 0x48]
cmp ecx, eax
je 0xebbdd
cmp dword [eax + 0x14], 8
mov edx, eax
jb 0xebbd4
mov edx, dword [eax]
push dword [eax + 0x10]
push edx
call fcn.000d1370
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 7
call fcn.000ced70
mov ecx, dword [ebp - 0x9c]
movsx eax, word [ecx + 0x1a]
mov dword [esi + 0x60], eax
cmp byte [ecx + 0x39], 0
movsx eax, word [ecx + 0x3c]
mov dword [ebp - 0xa4], eax
je 0xebc41
push 0
push 0
push esi
push 0xebcf0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [edi + 4]
mov dword [ebp - 0x9c], eax
cmp dword [edi + 8], ecx
je 0xebc30
mov dword [ecx], eax
add dword [edi + 4], 4
jmp 0xebc50
lea eax, [ebp - 0x9c]
push eax
push ecx
mov ecx, edi
call fcn.000de850
jmp 0xebc50
mov ecx, esi
call fcn.000ebd30
push ecx
mov ecx, esi
call fcn.000ebcc0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x5c], 0x12a35c
test ecx, ecx
je 0xebc68
mov eax, dword [ecx]
push 1
call dword [eax]
mov ecx, dword [ebp - 0x50]
test ecx, ecx
je 0xebc75
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [ebp - 0x4c]
call fcn.000ced70
call fcn.000eb370
mov esi, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xa0]
test al, al
je 0xeb8c0
lea ecx, [ebp - 0x2c]
call fcn.000ced70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.000f1776
mov esp, ebp
pop ebp
ret