Function at 0x1001354e
Capabilities:
Create thread

Disassembly:
jae 0x10013302
jmp 0x100132fd
call fcn.10013304
jae 0x100132fd
add esp, 4
jmp 0x10013309
dec dword [esp]
jno 0x1001330e
jns 0x100132f9
jp 0x10013312
add esp, 4
popf
jmp 0x10013319
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013332
jne 0x10013332
call 0x1fc16686
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10015270
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x10013361
jne 0x10013360
call 0x930523e8
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
or esi, dword [ebx + edi*8 - 8]
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001336f
jmp 0x10013371
je 0x1001336c
clc
jae 0x10013376
pop ds
or esi, dword [ebx + eax + 0x75]
add dword [ebx], ecx
je 0x1001337b
jne 0x1001337b
or esp, dword [esi - 0x64]
pushf
push 0xa
jae 0x10013388
jmp 0x10013383
call 0x1001338a
jae 0x10013383
add esp, 4
jmp 0x1001338f
dec dword [esp]
jno 0x10013394
jns 0x1001337f
jp 0x10013398
add esp, 4
popf
jmp 0x1001339f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100133b8
jne 0x100133b8
call 0x1fc1670c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x100133d2
jne 0x100133d1
call 0x93052459
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sub al, 0x74
sti
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100133e0
jmp 0x100133e2
je 0x100133dd
clc
jae 0x100133e7
shr dword [esp + esi*2], 3
je 0x100133ec
jne 0x100133ec
sub al, 0x66
pushfd
pushf
push 0xa
jae 0x100133f9
jmp 0x100133f4
call 0x100133fb
jae 0x100133f4
add esp, 4
jmp 0x10013400
dec dword [esp]
jno 0x10013405
jns 0x100133f0
jp 0x10013409
add esp, 4
popf
jmp 0x10013410
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013429
jne 0x10013429
call 0x1fc1677d
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10013443
jne 0x10013442
call 0x930524ca
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
mov ebx, 0x73f8fb74
add dl, byte [0x750374bb]
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10013451
jmp 0x10013453
je 0x1001344e
clc
jae 0x10013458
adc eax, 0x750374bb
je 0x1001345d
jne 0x1001345d
add dword [ebx + 0xa6a9c66], edi
mov ebx, 0xa6a9c66
pushf
push 0xa
jae 0x1001346a
jmp 0x10013465
call 0x1001346c
jae 0x10013465
add esp, 4
jmp 0x10013471
dec dword [esp]
jno 0x10013476
jns 0x10013461
jp 0x1001347a
add esp, 4
popf
jmp 0x10013481
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001349a
jne 0x1001349a
call 0x1fc167ee
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x100134b4
jne 0x100134b3
call 0x9305253b
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
test byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100134c2
jmp 0x100134c4
je 0x100134bf
clc
jae 0x100134c9
mov esp, 0x75037484
add dword [esi + 0x730a6a9c], eax
pop es
je 0x100134ce
jne 0x100134ce
test byte [esi - 0x64], ah
pushf
push 0xa
jae 0x100134db
jmp 0x100134d6
call 0x100134dd
jae 0x100134d6
add esp, 4
jmp 0x100134e2
dec dword [esp]
jno 0x100134e7
jns 0x100134d2
jp 0x100134eb
add esp, 4
popf
jmp 0x100134f2
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001350b
jne 0x1001350b
call 0x1fc1685f
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10013525
jne 0x10013524
call 0x930525ac
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
dec ebp
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10013533
jmp 0x10013535
je 0x10013530
clc
jae 0x1001353a
dec bp
je 0x1001353f
jne 0x1001353f
dec ebp
pushf
push 0xa
jae 0x1001354c
jmp 0x10013547
call 0x1001354e
jae 0x10013547
add esp, 4
jmp 0x10013553
dec dword [esp]
jno 0x10013558
jns 0x10013543
jp 0x1001355c
add esp, 4
popf
jmp 0x10013563
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001357c
jne 0x1001357c
call 0x1fc168d0
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10014e10
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x100135ab
jne 0x100135aa
call 0x93052632
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
outsb dx, byte [esi]
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100135b9
jmp 0x100135bb
je 0x100135b6
clc
jae 0x100135c0
or ebp, dword [esi + 0x74]
add esi, dword [ebp + 1]
je 0x100135c5
jne 0x100135c5
outsb dx, byte [esi]
pushf
push 0xa
jae 0x100135d2
jmp 0x100135cd
call 0x100135d4
jae 0x100135cd
add esp, 4
jmp 0x100135d9
dec dword [esp]
jno 0x100135de
jns 0x100135c9
jp 0x100135e2
add esp, 4
popf
jmp 0x100135e9
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013602
jne 0x10013602
call 0x1fc16956
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10015160
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x10013631
jne 0x10013630
call 0x930526b8
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
aaa
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001363f
jmp 0x10013641
je 0x1001363c
clc
jae 0x10013646
mov dl, 0x37
je 0x1001364b
jne 0x1001364b
aaa
pushf
push 0xa
jae 0x10013658
jmp 0x10013653
call 0x1001365a
jae 0x10013653
add esp, 4
jmp 0x1001365f
dec dword [esp]
jno 0x10013664
jns 0x1001364f
jp 0x10013668
add esp, 4
popf
jmp 0x1001366f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013688
jne 0x10013688
call 0x1fc169dc
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10014e50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x100136b7
jne 0x100136b6
call 0x9305273e
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
add byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100136c5
jmp 0x100136c7
je 0x100136c2
clc
jae 0x100136cc
pop esp
add byte [ebx + eax + 0x75], dh
add dword [eax], eax
je 0x100136d1
jne 0x100136d1
add byte [esi - 0x64], ah
pushf
push 0xa
jae 0x100136de
jmp 0x100136d9
call 0x100136e0
jae 0x100136d9
add esp, 4
jmp 0x100136e5
dec dword [esp]
jno 0x100136ea
jns 0x100136d5
jp 0x100136ee
add esp, 4
popf
jmp 0x100136f5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001370e
jne 0x1001370e
call 0x1fc16a62
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10014ec0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x1001373d
jne 0x1001373c
call 0x930527c4
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
invalid
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001374b
jmp 0x1001374d
je 0x10013748