Function at 0x1003f9d0
Capabilities:
Create thread

Disassembly:
jae 0x1003f9ce
jmp 0x1003f9c9
call fcn.1003f9d0
jae 0x1003f9c9
add esp, 4
jmp 0x1003f9d5
dec dword [esp]
jno 0x1003f9da
jns 0x1003f9c5
jp 0x1003f9de
add esp, 4
popf
jmp 0x1003f9e5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003f9fe
jne 0x1003f9fe
call 0x1fc42d52
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10040e30
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
clc
jae 0x1003fa29
test al, 0xe7
pushf
push 0xa
jae 0x1003fa36
jmp 0x1003fa31
call 0x1003fa38
jae 0x1003fa31
add esp, 4
jmp 0x1003fa3d
dec dword [esp]
jno 0x1003fa42
jns 0x1003fa2d
jp 0x1003fa46
add esp, 4
popf
jmp 0x1003fa4d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003fa66
jne 0x1003fa66
out 0x7c, eax
add ebp, ebx
add esp, edi
jl 0x1003fa6b
jmp 0x1003fa6d
je 0x1003fa68
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003fa87
jne 0x1003fa86
call 0x9307eb0e
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003fa95
jne 0x1003fa95
call 0xd588060
invalid
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2b4], 0
clc
jae 0x1003fab8
cdq
pushf
pushf
push 0xa
jae 0x1003fac5
jmp 0x1003fac0
call 0x1003fac7
jae 0x1003fac0
add esp, 4
jmp 0x1003facc
dec dword [esp]
jno 0x1003fad1
jns 0x1003fabc
jp 0x1003fad5
add esp, 4
popf
jmp 0x1003fadc
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003faf5
jne 0x1003faf5
bnd jl 0x1003fafa
jl 0x1003fafa
jmp 0x1003fafc
je 0x1003faf7
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003fb16
jne 0x1003fb15
call 0x9307eb9d
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003fb24
jne 0x1003fb24
call 0xc8480ef
invalid
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x2bc], 0
xor eax, eax
test eax, eax
je 0x1003fb41
jne 0x1003fb40
call 0x9307ebc8
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
and dword [ebx + edi*8 - 8], esi
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1003fb4f
jmp 0x1003fb51
je 0x1003fb4c
clc
jae 0x1003fb56
sbb byte [ecx], ah
je 0x1003fb5b
jne 0x1003fb5b
and dword [esi - 0x64], esp
pushf
push 0xa
jae 0x1003fb68
jmp 0x1003fb63
call 0x1003fb6a
jae 0x1003fb63
add esp, 4
jmp 0x1003fb6f
dec dword [esp]
jno 0x1003fb74
jns 0x1003fb5f
jp 0x1003fb78
add esp, 4
popf
jmp 0x1003fb7f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003fb98
jne 0x1003fb98
call 0x1fc42eec
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2c4], 0
clc
jae 0x1003fbc2
invalid
pushf
push 0xa
jae 0x1003fbcf
jmp 0x1003fbca
call 0x1003fbd1
jae 0x1003fbca
add esp, 4
jmp 0x1003fbd6
dec dword [esp]
jno 0x1003fbdb
jns 0x1003fbc6
jp 0x1003fbdf
add esp, 4
popf
jmp 0x1003fbe6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003fbff
jne 0x1003fbff
movsd dword es:[edi], dword [esi]
jl 0x1003fc04
jmp 0x1003fc06
je 0x1003fc01
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003fc20
jne 0x1003fc1f
call 0x9307eca7
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003fc2e
jne 0x1003fc2e
call 0xd3c81f9
invalid
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2cc], 0
xor eax, eax
test eax, eax
je 0x1003fc4b
jne 0x1003fc4a
call 0x9307ecd2
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1003fc59
jmp 0x1003fc5b
je 0x1003fc56
clc
jae 0x1003fc60
push cs
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x1003fc65
jne 0x1003fc65
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x1003fc72
jmp 0x1003fc6d
call 0x1003fc74
jae 0x1003fc6d
add esp, 4
jmp 0x1003fc79
dec dword [esp]
jno 0x1003fc7e
jns 0x1003fc69
jp 0x1003fc82
add esp, 4
popf
jmp 0x1003fc89
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003fca2
jne 0x1003fca2
call 0x1fc42ff6
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2d8], 0
clc
jae 0x1003fcd6
pop edi
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1003fce3
jmp 0x1003fcde
call 0x1003fce5
jae 0x1003fcde
add esp, 4
jmp 0x1003fcea
dec dword [esp]
jno 0x1003fcef
jns 0x1003fcda
jp 0x1003fcf3
add esp, 4
popf
jmp 0x1003fcfa
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003fd13
jne 0x1003fd13
arpl word [ebx + eax - 0x15], di
add esp, dword [ebx + 0x74]
sti
jl 0x1003fd18
jmp 0x1003fd1a
je 0x1003fd15
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003fd34
jne 0x1003fd33
call 0x9307edbb
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003fd42
jne 0x1003fd42
call 0xd4c830d
invalid
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x374], 0
mov dword [ebp - 0x378], 0
clc
jae 0x1003fd65
rol dword [edx + 0x66], 1
pushfd
pushf
push 0xa
jae 0x1003fd72
jmp 0x1003fd6d
call 0x1003fd74
jae 0x1003fd6d
add esp, 4
jmp 0x1003fd79
dec dword [esp]
jno 0x1003fd7e
jns 0x1003fd69
jp 0x1003fd82
add esp, 4
popf
jmp 0x1003fd89
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003fda2
jne 0x1003fda2
inc edx
jl 0x1003fda7
jmp 0x1003fda9
je 0x1003fda4
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003fdc3
jne 0x1003fdc2
call 0x9307ee4a
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003fdd1
jne 0x1003fdd1
call 0x198f2a8d
mov ebp, 0xd88d8d50
invalid
mov eax, 0xbd098b2c
push eax
lea ecx, [ebp - 0x128]
call 0x1003f000
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x2e0]
push edx
call fcn.100414a0
add esp, 4
mov dword [ebp - 0x310], eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x278], 0
jmp 0x1003fe32
mov eax, dword [ebp - 0x278]
add eax, 1
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x30
jge 0x1003fe4b
mov ecx, dword [ebp - 0x278]
mov byte [ebp + ecx - 0x128], 0
jmp 0x1003fe23
xor eax, eax
test eax, eax
je 0x1003fe54
jne 0x1003fe53
call 0x9307eedb
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
arpl word [ebx + edi*8 - 8], si
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1003fe62
jmp 0x1003fe64
je 0x1003fe5f
clc
jae 0x1003fe69
jbe 0x1003fecc
je 0x1003fe6e
jne 0x1003fe6e
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1003fe7b
jmp 0x1003fe76
call 0x1003fe7d
jae 0x1003fe76
add esp, 4
jmp 0x1003fe82
dec dword [esp]
jno 0x1003fe87
jns 0x1003fe72
jp 0x1003fe8b
add esp, 4
popf
jmp 0x1003fe92
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003feab
jne 0x1003feab
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov edx, 0x9d2d9952
push edx
lea ecx, [ebp - 0x68]
call fcn.1003ee00
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x36c], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x36c]
push ecx
call fcn.100414a0
add esp, 4
mov dword [ebp - 0x314], eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x27c], 0
jmp 0x1003ff1a
sbb al, 0xfd
invalid