Function at 0x1001b550
Capabilities:
Create thread

Disassembly:
jae 0x1001b54e
jmp 0x1001b549
call fcn.1001b550
jae 0x1001b549
add esp, 4
jmp 0x1001b555
dec dword [esp]
jno 0x1001b55a
jns 0x1001b545
jp 0x1001b55e
add esp, 4
popf
jmp 0x1001b565
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b57e
jne 0x1001b57e
call 0x1fc1e8d2
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x1001c7a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
clc
jae 0x1001b5a9
test al, 0xe7
pushf
push 0xa
jae 0x1001b5b6
jmp 0x1001b5b1
call 0x1001b5b8
jae 0x1001b5b1
add esp, 4
jmp 0x1001b5bd
dec dword [esp]
jno 0x1001b5c2
jns 0x1001b5ad
jp 0x1001b5c6
add esp, 4
popf
jmp 0x1001b5cd
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b5e6
jne 0x1001b5e6
out 0x7c, eax
add ebp, ebx
add esp, edi
jl 0x1001b5eb
jmp 0x1001b5ed
je 0x1001b5e8
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001b607
jne 0x1001b606
call 0x9305a68e
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001b615
jne 0x1001b615
call 0xd8a3be0
invalid
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x280], 0
clc
jae 0x1001b638
cdq
pushf
pushf
push 0xa
jae 0x1001b645
jmp 0x1001b640
call 0x1001b647
jae 0x1001b640
add esp, 4
jmp 0x1001b64c
dec dword [esp]
jno 0x1001b651
jns 0x1001b63c
jp 0x1001b655
add esp, 4
popf
jmp 0x1001b65c
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b675
jne 0x1001b675
bnd jl 0x1001b67a
jl 0x1001b67a
jmp 0x1001b67c
je 0x1001b677
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001b696
jne 0x1001b695
call 0x9305a71d
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001b6a4
jne 0x1001b6a4
call 0xcb63c6f
invalid
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x288], 0
xor eax, eax
test eax, eax
je 0x1001b6c1
jne 0x1001b6c0
call 0x9305a748
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
and dword [ebx + edi*8 - 8], esi
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001b6cf
jmp 0x1001b6d1
je 0x1001b6cc
clc
jae 0x1001b6d6
sbb byte [ecx], ah
je 0x1001b6db
jne 0x1001b6db
and dword [esi - 0x64], esp
pushf
push 0xa
jae 0x1001b6e8
jmp 0x1001b6e3
call 0x1001b6ea
jae 0x1001b6e3
add esp, 4
jmp 0x1001b6ef
dec dword [esp]
jno 0x1001b6f4
jns 0x1001b6df
jp 0x1001b6f8
add esp, 4
popf
jmp 0x1001b6ff
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b718
jne 0x1001b718
call 0x1fc1ea6c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x290], 0
clc
jae 0x1001b742
invalid
pushf
push 0xa
jae 0x1001b74f
jmp 0x1001b74a
call 0x1001b751
jae 0x1001b74a
add esp, 4
jmp 0x1001b756
dec dword [esp]
jno 0x1001b75b
jns 0x1001b746
jp 0x1001b75f
add esp, 4
popf
jmp 0x1001b766
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b77f
jne 0x1001b77f
movsd dword es:[edi], dword [esi]
jl 0x1001b784
jmp 0x1001b786
je 0x1001b781
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001b7a0
jne 0x1001b79f
call 0x9305a827
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001b7ae
jne 0x1001b7ae
call 0xd6e3d79
invalid
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x2a4], 0
xor eax, eax
test eax, eax
je 0x1001b7cb
jne 0x1001b7ca
call 0x9305a852
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001b7d9
jmp 0x1001b7db
je 0x1001b7d6
clc
jae 0x1001b7e0
push cs
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x1001b7e5
jne 0x1001b7e5
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x1001b7f2
jmp 0x1001b7ed
call 0x1001b7f4
jae 0x1001b7ed
add esp, 4
jmp 0x1001b7f9
dec dword [esp]
jno 0x1001b7fe
jns 0x1001b7e9
jp 0x1001b802
add esp, 4
popf
jmp 0x1001b809
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b822
jne 0x1001b822
call 0x1fc1eb76
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x2a0], 0
clc
jae 0x1001b856
pop edi
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1001b863
jmp 0x1001b85e
call 0x1001b865
jae 0x1001b85e
add esp, 4
jmp 0x1001b86a
dec dword [esp]
jno 0x1001b86f
jns 0x1001b85a
jp 0x1001b873
add esp, 4
popf
jmp 0x1001b87a
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b893
jne 0x1001b893
arpl word [ebx + eax - 0x15], di
add esp, dword [ebx + 0x74]
sti
jl 0x1001b898
jmp 0x1001b89a
je 0x1001b895
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001b8b4
jne 0x1001b8b3
call 0x9305a93b
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001b8c2
jne 0x1001b8c2
call 0xd7e3e8d
invalid
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x344], 0
clc
jae 0x1001b8e5
rol dword [edx + 0x66], 1
pushfd
pushf
push 0xa
jae 0x1001b8f2
jmp 0x1001b8ed
call 0x1001b8f4
jae 0x1001b8ed
add esp, 4
jmp 0x1001b8f9
dec dword [esp]
jno 0x1001b8fe
jns 0x1001b8e9
jp 0x1001b902
add esp, 4
popf
jmp 0x1001b909
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001b922
jne 0x1001b922
inc edx
jl 0x1001b927
jmp 0x1001b929
je 0x1001b924
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001b943
jne 0x1001b942
call 0x9305a9ca
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001b951
jne 0x1001b951
call 0x16cdae0d
mov ebp, 0xd88d8d50
invalid
mov eax, 0xbd06cbf4
push eax
lea ecx, [ebp - 0x128]
call 0x1001ad10
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x2ac]
push edx
call fcn.1001cd90
add esp, 4
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1001b120
xor eax, eax
test eax, eax
je 0x1001b9ab
jne 0x1001b9aa
call 0x9305aa32
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
arpl word [ebx + edi*8 - 8], si
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001b9b9
jmp 0x1001b9bb
je 0x1001b9b6
clc
jae 0x1001b9c0
jbe 0x1001ba23
je 0x1001b9c5
jne 0x1001b9c5
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1001b9d2
jmp 0x1001b9cd
call 0x1001b9d4
jae 0x1001b9cd
add esp, 4
jmp 0x1001b9d9
dec dword [esp]
jno 0x1001b9de
jns 0x1001b9c9
jp 0x1001b9e2
add esp, 4
popf
jmp 0x1001b9e9
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001ba02
jne 0x1001ba02
call 0x1fc1ed56
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov eax, 0x9d2ada1a
push eax
lea ecx, [ebp - 0x68]
call fcn.1001ab10
mov dword [ebp - 0x2b0], eax
mov ecx, dword [ebp - 0x2b0]
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x2b4]
push edx
call fcn.1001cd90
add esp, 4
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.1000dfd0
clc
jae 0x1001ba63
push eax
std
invalid
and byte [esi], ch
pushfd
pushf
push 0xa
jae 0x1001ba70
jmp 0x1001ba6b
jae 0x1001ba6b