Function at 0x1001b9c9
Capabilities:
Create thread

Disassembly:
jae 0x1001b5c8
jmp 0x1001b5c3
call fcn.1001b5ca
jae 0x1001b5c3
add esp, 4
jmp 0x1001b5cf
dec dword [esp]
jno 0x1001b5d4
jns 0x1001b5bf
jp 0x1001b5d8
add esp, 4
popf
jmp 0x1001b5df
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b5f8
jne 0x1001b5f8
bnd jl 0x1001b5fd
jl 0x1001b5fd
jmp 0x1001b5ff
je 0x1001b5fa
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001b619
jne 0x1001b618
call 0x9305a6a0
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001b627
jne 0x1001b627
call 0xd087765e
xor eax, eax
test eax, eax
je 0x1001b630
jne 0x1001b62f
call 0x9305a6b7
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
push ss
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001b63e
jmp 0x1001b640
je 0x1001b63b
clc
jae 0x1001b645
push ss
je 0x1001b64a
jne 0x1001b64a
push ss
pushf
push 0xa
jae 0x1001b657
jmp 0x1001b652
call 0x1001b659
jae 0x1001b652
add esp, 4
jmp 0x1001b65e
dec dword [esp]
jno 0x1001b663
jns 0x1001b64e
jp 0x1001b667
add esp, 4
popf
jmp 0x1001b66e
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b687
jne 0x1001b687
call 0x1fc1e9db
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.10025110
clc
jae 0x1001b6a2
invalid
pushf
push 0xa
jae 0x1001b6af
jmp 0x1001b6aa
call 0x1001b6b1
jae 0x1001b6aa
add esp, 4
jmp 0x1001b6b6
dec dword [esp]
jno 0x1001b6bb
jns 0x1001b6a6
jp 0x1001b6bf
add esp, 4
popf
jmp 0x1001b6c6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b6df
jne 0x1001b6df
movsd dword es:[edi], dword [esi]
jl 0x1001b6e4
jmp 0x1001b6e6
je 0x1001b6e1
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001b700
jne 0x1001b6ff
call 0x9305a787
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001b70e
jne 0x1001b70e
call 0xd0877745
xor eax, eax
test eax, eax
je 0x1001b717
jne 0x1001b716
call 0x9305a79e
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
outsb dx, byte [esi]
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001b725
jmp 0x1001b727
je 0x1001b722
clc
jae 0x1001b72c
cmp dword [esi + 0x74], ebp
add esi, dword [ebp + 1]
je 0x1001b731
jne 0x1001b731
outsb dx, byte [esi]
pushf
push 0xa
jae 0x1001b73e
jmp 0x1001b739
call 0x1001b740
jae 0x1001b739
add esp, 4
jmp 0x1001b745
dec dword [esp]
jno 0x1001b74a
jns 0x1001b735
jp 0x1001b74e
add esp, 4
popf
jmp 0x1001b755
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b76e
jne 0x1001b76e
call 0x1fc1eac2
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001b788
jne 0x1001b787
call 0x9305a80f
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
aaa
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001b796
jmp 0x1001b798
je 0x1001b793
clc
jae 0x1001b79d
loopne 0x1001b7d4
je 0x1001b7a2
jne 0x1001b7a2
aaa
pushf
push 0xa
jae 0x1001b7af
jmp 0x1001b7aa
call 0x1001b7b1
jae 0x1001b7aa
add esp, 4
jmp 0x1001b7b6
dec dword [esp]
jno 0x1001b7bb
jns 0x1001b7a6
jp 0x1001b7bf
add esp, 4
popf
jmp 0x1001b7c6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b7df
add byte [eax + 3], bl
ret 0x585a
jne 0x1001b7df
call 0x1fc1eb33
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x1001e530
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x1001b80e
jne 0x1001b80d
call 0x9305a895
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
pop eax
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001b81c
jmp 0x1001b81e
je 0x1001b819
clc
jae 0x1001b823
test dword [eax + 0x74], ebx
add esi, dword [ebp + 1]
je 0x1001b828
jne 0x1001b828
pop eax
pushf
push 0xa
jae 0x1001b835
jmp 0x1001b830
call 0x1001b837
jae 0x1001b830
add esp, 4
jmp 0x1001b83c
dec dword [esp]
jno 0x1001b841
jns 0x1001b82c
jp 0x1001b845
add esp, 4
popf
jmp 0x1001b84c
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b865
jne 0x1001b865
call 0x1fc1ebb9
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x1001e220
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x1001b894
jne 0x1001b893
call 0x9305a91b
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
and dword [ebx + edi*8 - 8], esi
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001b8a2
jmp 0x1001b8a4
je 0x1001b89f
clc
jae 0x1001b8a9
das
and dword [ebx + eax + 0x75], esi
add dword [ecx], esp
je 0x1001b8ae
jne 0x1001b8ae
and dword [esi - 0x64], esp
pushf
push 0xa
jae 0x1001b8bb
jmp 0x1001b8b6
call 0x1001b8bd
jae 0x1001b8b6
add esp, 4
jmp 0x1001b8c2
dec dword [esp]
jno 0x1001b8c7
jns 0x1001b8b2
jp 0x1001b8cb
add esp, 4
popf
jmp 0x1001b8d2
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b8eb
jne 0x1001b8eb
call 0x1fc1ec3f
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x1001e290
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x1001b91a
jne 0x1001b919
call 0x9305a9a1
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
out 0x74, eax
sti
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001b928
jmp 0x1001b92a
je 0x1001b925
clc
jae 0x1001b92f
salc
out 0x74, eax
add esi, dword [ebp + 1]
je 0x1001b934
jne 0x1001b934
out 0x66, eax
pushfd
pushf
push 0xa
jae 0x1001b941
jmp 0x1001b93c
call 0x1001b943
jae 0x1001b93c
add esp, 4
jmp 0x1001b948
dec dword [esp]
jno 0x1001b94d
jns 0x1001b938
jp 0x1001b951
add esp, 4
popf
jmp 0x1001b958
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b971
jne 0x1001b971
call 0x1fc1ecc5
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x1001e300
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x1001b9a0
jne 0x1001b99f
call 0x9305aa27
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
mov al, 0x74
sti
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001b9ae
jmp 0x1001b9b0
je 0x1001b9ab
clc
jae 0x1001b9b5
xor byte [eax + 0x1750374], 0xb0
je 0x1001b9ba
jne 0x1001b9ba
mov al, 0x66
pushfd
pushf
push 0xa
jae 0x1001b9c7
jmp 0x1001b9c2
call 0x1001b9c9
jae 0x1001b9c2
add esp, 4
jmp 0x1001b9ce
dec dword [esp]
jno 0x1001b9d3
jns 0x1001b9be
jp 0x1001b9d7