Function at 0x1002ab5a
Capabilities:
Create thread

Disassembly:
jae 0x1002a79d
jmp 0x1002a798
call fcn.1002a79f
jae 0x1002a798
add esp, 4
jmp 0x1002a7a4
dec dword [esp]
jno 0x1002a7a9
jns 0x1002a794
jp 0x1002a7ad
add esp, 4
popf
jmp 0x1002a7b4
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002a7cd
jne 0x1002a7cd
mov al, 0x7c
add ebp, ebx
add esi, dword [eax + 0x3350fb74]
ror byte [edi], 0x9b
rcl byte [edx + 0x33], 0xd0
jl 0x1002a7d2
jmp 0x1002a7d4
je 0x1002a7cf
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002a7ee
jne 0x1002a7ed
call 0x93069875
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002a7fc
jne 0x1002a7fc
call 0xfca27e8
invalid
call 0x10026f80
clc
jae 0x1002a806
hlt
pushf
push 0xa
jae 0x1002a813
jmp 0x1002a80e
call 0x1002a815
jae 0x1002a80e
add esp, 4
jmp 0x1002a81a
dec dword [esp]
jno 0x1002a81f
jns 0x1002a80a
jp 0x1002a823
add esp, 4
popf
jmp 0x1002a82a
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002a843
jne 0x1002a843
sar dword [ebx + eax - 0x15], 1
add edx, ecx
jl 0x1002a848
jmp 0x1002a84a
je 0x1002a845
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002a864
jne 0x1002a863
call 0x930698eb
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002a872
jne 0x1002a872
call 0x11aef25e
add byte [ebx], dh
rol byte [ebp + 0x750374c0], 0
call 0x100454c0
xor eax, eax
test eax, eax
je 0x1002a880
jne 0x1002a87f
call 0x93069907
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
lcall 0x9e02, 0x73f8fb74
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002a88e
jmp 0x1002a890
je 0x1002a88b
clc
jae 0x1002a895
sahf
lcall 0x669a, 0x1750374
pushfd
je 0x1002a89a
jne 0x1002a89a
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x1002a8a7
jmp 0x1002a8a2
call 0x1002a8a9
jae 0x1002a8a2
add esp, 4
jmp 0x1002a8ae
dec dword [esp]
jno 0x1002a8b3
jns 0x1002a89e
jp 0x1002a8b7
add esp, 4
popf
jmp 0x1002a8be
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002a8d7
jne 0x1002a8d7
call 0x1fc2dc2b
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.10037300
xor eax, eax
test eax, eax
je 0x1002a8f6
jne 0x1002a8f5
call 0x9306997d
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
arpl word [ebx + edi*8 - 8], si
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002a904
jmp 0x1002a906
je 0x1002a901
clc
jae 0x1002a90b
dec eax
arpl word [ebx + eax + 0x75], si
add dword [ebx + 0x66], esp
pushfd
je 0x1002a910
jne 0x1002a910
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1002a91d
jmp 0x1002a918
call 0x1002a91f
jae 0x1002a918
add esp, 4
jmp 0x1002a924
dec dword [esp]
jno 0x1002a929
jns 0x1002a914
jp 0x1002a92d
add esp, 4
popf
jmp 0x1002a934
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002a94d
jne 0x1002a94d
call 0x1fc2dca1
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x1002a963
out dx, eax
sub al, 0x66
pushfd
pushf
push 0xa
jae 0x1002a970
jmp 0x1002a96b
call 0x1002a972
jae 0x1002a96b
add esp, 4
jmp 0x1002a977
dec dword [esp]
jno 0x1002a97c
jns 0x1002a967
jp 0x1002a980
add esp, 4
popf
jmp 0x1002a987
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002a9a0
jne 0x1002a9a0
sub al, 0x7c
add ebp, ebx
add ebp, dword [esp + esi*2]
sti
jl 0x1002a9a5
jmp 0x1002a9a7
je 0x1002a9a2
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002a9c1
jne 0x1002a9c0
call 0x93069a48
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002a9cf
jne 0x1002a9cf
call 0xe6ea6bb
invalid
call 0x100115d0
clc
jae 0x1002a9d9
cdq
pushf
pushf
push 0xa
jae 0x1002a9e6
jmp 0x1002a9e1
call 0x1002a9e8
jae 0x1002a9e1
add esp, 4
jmp 0x1002a9ed
dec dword [esp]
jno 0x1002a9f2
jns 0x1002a9dd
jp 0x1002a9f6
add esp, 4
popf
jmp 0x1002a9fd
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002aa16
jne 0x1002aa16
bnd jl 0x1002aa1b
jl 0x1002aa1b
jmp 0x1002aa1d
je 0x1002aa18
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002aa37
jne 0x1002aa36
call 0x93069abe
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002aa45
jne 0x1002aa45
call 0xe822131
push dword [ebx]
rol byte [ebp + 0x750374c0], 0
call 0x100129c0
xor eax, eax
test eax, eax
je 0x1002aa53
jne 0x1002aa52
call 0x93069ada
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
push ss
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002aa61
jmp 0x1002aa63
je 0x1002aa5e
clc
jae 0x1002aa68
push ss
je 0x1002aa6d
jne 0x1002aa6d
push ss
pushf
push 0xa
jae 0x1002aa7a
jmp 0x1002aa75
call 0x1002aa7c
jae 0x1002aa75
add esp, 4
jmp 0x1002aa81
dec dword [esp]
jno 0x1002aa86
jns 0x1002aa71
jp 0x1002aa8a
add esp, 4
popf
jmp 0x1002aa91
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002aaaa
jne 0x1002aaaa
call 0x1fc2ddfe
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.100428d0
xor eax, eax
test eax, eax
je 0x1002aac9
jne 0x1002aac8
call 0x93069b50
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
fdiv qword [ebx + edi*8 - 8]
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002aad7
jmp 0x1002aad9
je 0x1002aad4
clc
jae 0x1002aade
in eax, 0xdc
je 0x1002aae3
jne 0x1002aae3
fsub qword [esi - 0x64]
pushf
push 0xa
jae 0x1002aaf0
jmp 0x1002aaeb
call 0x1002aaf2
jae 0x1002aaeb
add esp, 4
jmp 0x1002aaf7
dec dword [esp]
jno 0x1002aafc
jns 0x1002aae7
jp 0x1002ab00
add esp, 4
popf
jmp 0x1002ab07
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002ab20
jne 0x1002ab20
call 0x1fc2de74
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x100343a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
clc
jae 0x1002ab4b
invalid
pushf
push 0xa
jae 0x1002ab58
jmp 0x1002ab53
call 0x1002ab5a
jae 0x1002ab53
add esp, 4
jmp 0x1002ab5f
dec dword [esp]
jno 0x1002ab64
jns 0x1002ab4f
jp 0x1002ab68
add esp, 4
popf
jmp 0x1002ab6f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002ab88
jne 0x1002ab88
movsd dword es:[edi], dword [esi]
jl 0x1002ab8d
jmp 0x1002ab8f
je 0x1002ab8a
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002aba9