Function at 0x1003f070
Capabilities:
Create thread

Disassembly:
jae 0x1003f06e
jmp 0x1003f069
call fcn.1003f070
jae 0x1003f069
add esp, 4
jmp 0x1003f075
dec dword [esp]
jno 0x1003f07a
jns 0x1003f065
jp 0x1003f07e
add esp, 4
popf
jmp 0x1003f085
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003f09e
jne 0x1003f09e
call 0x1fc423f2
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x100404d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
clc
jae 0x1003f0c9
test al, 0xe7
pushf
push 0xa
jae 0x1003f0d6
jmp 0x1003f0d1
call 0x1003f0d8
jae 0x1003f0d1
add esp, 4
jmp 0x1003f0dd
dec dword [esp]
jno 0x1003f0e2
jns 0x1003f0cd
jp 0x1003f0e6
add esp, 4
popf
jmp 0x1003f0ed
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003f106
jne 0x1003f106
out 0x7c, eax
add ebp, ebx
add esp, edi
jl 0x1003f10b
jmp 0x1003f10d
je 0x1003f108
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003f127
jne 0x1003f126
call 0x9307e1ae
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003f135
jne 0x1003f135
call 0xd587700
invalid
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2b4], 0
clc
jae 0x1003f158
cdq
pushf
pushf
push 0xa
jae 0x1003f165
jmp 0x1003f160
call 0x1003f167
jae 0x1003f160
add esp, 4
jmp 0x1003f16c
dec dword [esp]
jno 0x1003f171
jns 0x1003f15c
jp 0x1003f175
add esp, 4
popf
jmp 0x1003f17c
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003f195
jne 0x1003f195
bnd jl 0x1003f19a
jl 0x1003f19a
jmp 0x1003f19c
je 0x1003f197
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003f1b6
jne 0x1003f1b5
call 0x9307e23d
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003f1c4
jne 0x1003f1c4
call 0xc84778f
invalid
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x2bc], 0
xor eax, eax
test eax, eax
je 0x1003f1e1
jne 0x1003f1e0
call 0x9307e268
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
and dword [ebx + edi*8 - 8], esi
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1003f1ef
jmp 0x1003f1f1
je 0x1003f1ec
clc
jae 0x1003f1f6
sbb byte [ecx], ah
je 0x1003f1fb
jne 0x1003f1fb
and dword [esi - 0x64], esp
pushf
push 0xa
jae 0x1003f208
jmp 0x1003f203
call 0x1003f20a
jae 0x1003f203
add esp, 4
jmp 0x1003f20f
dec dword [esp]
jno 0x1003f214
jns 0x1003f1ff
jp 0x1003f218
add esp, 4
popf
jmp 0x1003f21f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003f238
jne 0x1003f238
call 0x1fc4258c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2c4], 0
clc
jae 0x1003f262
invalid
pushf
push 0xa
jae 0x1003f26f
jmp 0x1003f26a
call 0x1003f271
jae 0x1003f26a
add esp, 4
jmp 0x1003f276
dec dword [esp]
jno 0x1003f27b
jns 0x1003f266
jp 0x1003f27f
add esp, 4
popf
jmp 0x1003f286
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003f29f
jne 0x1003f29f
movsd dword es:[edi], dword [esi]
jl 0x1003f2a4
jmp 0x1003f2a6
je 0x1003f2a1
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003f2c0
jne 0x1003f2bf
call 0x9307e347
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003f2ce
jne 0x1003f2ce
call 0xd3c7899
invalid
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2cc], 0
xor eax, eax
test eax, eax
je 0x1003f2eb
jne 0x1003f2ea
call 0x9307e372
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1003f2f9
jmp 0x1003f2fb
je 0x1003f2f6
clc
jae 0x1003f300
push cs
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x1003f305
jne 0x1003f305
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x1003f312
jmp 0x1003f30d
call 0x1003f314
jae 0x1003f30d
add esp, 4
jmp 0x1003f319
dec dword [esp]
jno 0x1003f31e
jns 0x1003f309
jp 0x1003f322
add esp, 4
popf
jmp 0x1003f329
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003f342
jne 0x1003f342
call 0x1fc42696
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2d8], 0
clc
jae 0x1003f376
pop edi
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1003f383
jmp 0x1003f37e
call 0x1003f385
jae 0x1003f37e
add esp, 4
jmp 0x1003f38a
dec dword [esp]
jno 0x1003f38f
jns 0x1003f37a
jp 0x1003f393
add esp, 4
popf
jmp 0x1003f39a
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003f3b3
jne 0x1003f3b3
arpl word [ebx + eax - 0x15], di
add esp, dword [ebx + 0x74]
sti
jl 0x1003f3b8
jmp 0x1003f3ba
je 0x1003f3b5
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003f3d4
jne 0x1003f3d3
call 0x9307e45b
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003f3e2
jne 0x1003f3e2
call 0xd4c79ad
invalid
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x374], 0
mov dword [ebp - 0x378], 0
clc
jae 0x1003f405
rol dword [edx + 0x66], 1
pushfd
pushf
push 0xa
jae 0x1003f412
jmp 0x1003f40d
call 0x1003f414
jae 0x1003f40d
add esp, 4
jmp 0x1003f419
dec dword [esp]
jno 0x1003f41e
jns 0x1003f409
jp 0x1003f422
add esp, 4
popf
jmp 0x1003f429
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003f442
jne 0x1003f442
inc edx
jl 0x1003f447
jmp 0x1003f449
je 0x1003f444
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003f463
jne 0x1003f462
call 0x9307e4ea
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003f471
jne 0x1003f471
call 0x197f812d
mov ebp, 0xd88d8d50
invalid
mov eax, 0xbd097b8c
push eax
lea ecx, [ebp - 0x128]
call 0x1003e6a0
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x2e0]
push edx
call fcn.10040b40
add esp, 4
mov dword [ebp - 0x310], eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x278], 0
jmp 0x1003f4d2
mov eax, dword [ebp - 0x278]
add eax, 1
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x30
jge 0x1003f4eb
mov ecx, dword [ebp - 0x278]
mov byte [ebp + ecx - 0x128], 0
jmp 0x1003f4c3
xor eax, eax
test eax, eax
je 0x1003f4f4
jne 0x1003f4f3
call 0x9307e57b
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
arpl word [ebx + edi*8 - 8], si
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1003f502
jmp 0x1003f504
je 0x1003f4ff
clc
jae 0x1003f509
jbe 0x1003f56c
je 0x1003f50e
jne 0x1003f50e
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1003f51b
jmp 0x1003f516
call 0x1003f51d
jae 0x1003f516
add esp, 4
jmp 0x1003f522
dec dword [esp]
jno 0x1003f527
jns 0x1003f512
jp 0x1003f52b
add esp, 4
popf
jmp 0x1003f532
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003f54b
jne 0x1003f54b
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov edx, 0x9d2d89b2
push edx
lea ecx, [ebp - 0x68]
call fcn.1003e4a0
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x36c], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x36c]
push ecx
call fcn.10040b40
add esp, 4
mov dword [ebp - 0x314], eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x27c], 0
jmp 0x1003f5ba
sbb al, 0xfd
invalid