Function at 0x10013766
Capabilities:
Create thread

Disassembly:
jae 0x10013764
jmp 0x1001375f
call fcn.10013766
jae 0x1001375f
add esp, 4
jmp 0x1001376b
dec dword [esp]
jno 0x10013770
jns 0x1001375b
jp 0x10013774
add esp, 4
popf
jmp 0x1001377b
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013794
jne 0x10013794
call 0x1fc16ae8
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10014f30
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x100137c3
jne 0x100137c2
call 0x9305284a
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
invalid
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100137d1
jmp 0x100137d3
je 0x100137ce
clc
jae 0x100137d8
lodsd eax, dword [esi]
invalid
je 0x100137dd
jne 0x100137dd
invalid
pushf
push 0xa
jae 0x100137ea
jmp 0x100137e5
call 0x100137ec
jae 0x100137e5
add esp, 4
jmp 0x100137f1
dec dword [esp]
jno 0x100137f6
jns 0x100137e1
jp 0x100137fa
add esp, 4
popf
jmp 0x10013801
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001381a
jne 0x1001381a
call 0x1fc16b6e
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10014fa0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x10013849
jne 0x10013848
call 0x930528d0
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
mov al, 0x74
sti
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10013857
jmp 0x10013859
je 0x10013854
clc
jae 0x1001385e
push edx
mov al, 0x74
add esi, dword [ebp + 1]
je 0x10013863
jne 0x10013863
mov al, 0x66
pushfd
pushf
push 0xa
jae 0x10013870
jmp 0x1001386b
call 0x10013872
jae 0x1001386b
add esp, 4
jmp 0x10013877
dec dword [esp]
jno 0x1001387c
jns 0x10013867
jp 0x10013880
add esp, 4
popf
jmp 0x10013887
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100138a0
jne 0x100138a0
call 0x1fc16bf4
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10015010
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x100138cf
jne 0x100138ce
call 0x93052956
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
jns 0x10013952
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100138dd
jmp 0x100138df
je 0x100138da
sti
clc
jae 0x100138e4
stc
jns 0x10013959
je 0x100138e9
add esi, dword [ebp + 1]
jne 0x100138e9
jns 0x10013950
pushf
pushfd
push 0xa
jae 0x100138f6
jmp 0x100138f1
call 0x100138f8
jae 0x100138f1
add esp, 4
jmp 0x100138fd
dec dword [esp]
jno 0x10013902
jns 0x100138ed
jp 0x10013906
add esp, 4
popf
jmp 0x1001390d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013926
jne 0x10013926
call 0x1fc16c7a
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10015080
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x10013955
jne 0x10013954
call 0x930529dc
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10013963
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
inc edx
jmp 0x10013965
je 0x10013960
clc
jae 0x1001396a
mov dword [0x75037442], eax
add dword [edx + 0x66], eax
pushfd
je 0x1001396f
jne 0x1001396f
inc edx
pushf
push 0xa
jae 0x1001397c
jmp 0x10013977
call 0x1001397e
jae 0x10013977
add esp, 4
jmp 0x10013983
dec dword [esp]
jno 0x10013988
jns 0x10013973
jp 0x1001398c
add esp, 4
popf
jmp 0x10013993
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100139ac
jne 0x100139ac
call 0x1fc16d00
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x100150f0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x100139db
jne 0x100139da
call 0x93052a62
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
or esi, dword [ebx + edi*8 - 8]
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100139e9
jmp 0x100139eb
je 0x100139e6
clc
jae 0x100139f0
dec ebp
or esi, dword [ebx + eax + 0x75]
add dword [ebx], ecx
je 0x100139f5
jne 0x100139f5
or esp, dword [esi - 0x64]
pushf
push 0xa
jae 0x10013a02
jmp 0x100139fd
call 0x10013a04
jae 0x100139fd
add esp, 4
jmp 0x10013a09
dec dword [esp]
jno 0x10013a0e
jns 0x100139f9
jp 0x10013a12
add esp, 4
popf
jmp 0x10013a19
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013a32
jne 0x10013a32
call 0x1fc16d86
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x100151d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x10013a61
jne 0x10013a60
call 0x93052ae8
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10013a6f
jmp 0x10013a71
je 0x10013a6c
clc
jae 0x10013a76
hlt
je 0x10013a7b
jne 0x10013a7b
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x10013a88
jmp 0x10013a83
call 0x10013a8a
jae 0x10013a83
add esp, 4
jmp 0x10013a8f
dec dword [esp]
jno 0x10013a94
jns 0x10013a7f
jp 0x10013a98
add esp, 4
popf
jmp 0x10013a9f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013ab8
jne 0x10013ab8
call 0x1fc16e0c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret