Function at 0x1002b0b4
Capabilities:
Create thread

Disassembly:
jae 0x1002b0b2
jmp 0x1002b0ad
call fcn.1002b0b4
jae 0x1002b0ad
add esp, 4
jmp 0x1002b0b9
dec dword [esp]
jno 0x1002b0be
jns 0x1002b0a9
jp 0x1002b0c2
add esp, 4
popf
jmp 0x1002b0c9
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002b0e2
jne 0x1002b0e2
call 0x1fc2e436
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x1002eae0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x1002b111
jne 0x1002b110
call 0x9306a198
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
bnd je 0x1002b11c
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002b11f
jmp 0x1002b121
je 0x1002b11c
clc
jae 0x1002b126
invalid
je 0x1002b12b
jne 0x1002b12b
pushf
pushf
push 0xa
jae 0x1002b138
jmp 0x1002b133
call 0x1002b13a
jae 0x1002b133
add esp, 4
jmp 0x1002b13f
dec dword [esp]
jno 0x1002b144
jns 0x1002b12f
jp 0x1002b148
add esp, 4
popf
jmp 0x1002b14f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002b168
nop
add byte [eax], al
add byte [edx - 0x7f], dl
ljmp 0x358
jne 0x1002b168
call 0x1fc2e4bc
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002b182
jne 0x1002b181
call 0x9306a209
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
mov ebx, 0x73f8fb74
add dh, byte [ecx - 0x45]
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002b190
jmp 0x1002b192
je 0x1002b18d
clc
jae 0x1002b197
jno 0x1002b152
je 0x1002b19c
jne 0x1002b19c
mov ebx, 0xa6a9c66
pushf
push 0xa
jae 0x1002b1a9
jmp 0x1002b1a4
call 0x1002b1ab
jae 0x1002b1a4
add esp, 4
jmp 0x1002b1b0
dec dword [esp]
jno 0x1002b1b5
jns 0x1002b1a0
jp 0x1002b1b9
add esp, 4
popf
jmp 0x1002b1c0
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002b1d9
jne 0x1002b1d9
call 0x1fc2e52d
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002b1f3
jne 0x1002b1f2
call 0x9306a27a
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
fdiv qword [ebx + edi*8 - 8]
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002b201
jmp 0x1002b203
je 0x1002b1fe
clc
jae 0x1002b208
push ss
fdiv qword [ebx + eax + 0x75]
add esp, ebx
je 0x1002b20d
jne 0x1002b20d
fsub qword [esi - 0x64]
pushf
push 0xa
jae 0x1002b21a
jmp 0x1002b215
call 0x1002b21c
jae 0x1002b215
add esp, 4
jmp 0x1002b221
dec dword [esp]
jno 0x1002b226
jns 0x1002b211
jp 0x1002b22a
add esp, 4
popf
jmp 0x1002b231
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002b24a
jne 0x1002b24a
call 0x1fc2e59e
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002b264
jne 0x1002b263
call 0x9306a2eb
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
movsd dword es:[edi], dword [esi]
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002b272
jmp 0x1002b274
je 0x1002b26f
clc
jae 0x1002b279
mov ebp, 0x750374a5
add dword [ebp + 0xa6a9c66], esp
je 0x1002b27e
jne 0x1002b27e
movsd dword es:[edi], dword [esi]
pushf
push 0xa
jae 0x1002b28b
jmp 0x1002b286
call 0x1002b28d
jae 0x1002b286
add esp, 4
jmp 0x1002b292
dec dword [esp]
jno 0x1002b297
jns 0x1002b282
jp 0x1002b29b
add esp, 4
popf
jmp 0x1002b2a2
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002b2bb
jne 0x1002b2bb
call 0x1fc2e60f
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10029e70
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x1002b2ea
jne 0x1002b2e9
call 0x9306a371
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002b2f8
jmp 0x1002b2fa
je 0x1002b2f5
clc
jae 0x1002b2ff
cmp al, 0xd1
je 0x1002b304
jne 0x1002b304
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x1002b311
jmp 0x1002b30c
call 0x1002b313
jae 0x1002b30c
add esp, 4
jmp 0x1002b318
dec dword [esp]
jno 0x1002b31d
jns 0x1002b308
jp 0x1002b321
add esp, 4
popf
jmp 0x1002b328
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002b341
jne 0x1002b341
call 0x1fc2e695
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002b35b
jne 0x1002b35a
call 0x9306a3e2
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
lcall 0xe302, 0x73f8fb74
lcall 0x669a, 0x1750374
pushfd
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002b369
jmp 0x1002b36b
je 0x1002b366
clc
jae 0x1002b370
jecxz 0x1002b30a
je 0x1002b375
jne 0x1002b375
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x1002b382
jmp 0x1002b37d
call 0x1002b384
jae 0x1002b37d
add esp, 4
jmp 0x1002b389
dec dword [esp]
jno 0x1002b38e
jns 0x1002b379
jp 0x1002b392
add esp, 4
popf
jmp 0x1002b399
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002b3b2
jne 0x1002b3b2
call 0x1fc2e706
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1002ddf0
xor eax, eax
test eax, eax
je 0x1002b3d1
jne 0x1002b3d0
call 0x9306a458
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
mov ebx, 0x73f8fb74
add cl, byte [eax + 0x750374bb]
add dword [ebx + 0xa6a9c66], edi
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002b3df
jmp 0x1002b3e1
je 0x1002b3dc
clc
jae 0x1002b3e6
mov byte [ebx + 0x1750374], bh
je 0x1002b3eb
jne 0x1002b3eb
mov ebx, 0xa6a9c66
pushf
push 0xa
jae 0x1002b3f8
jmp 0x1002b3f3
call 0x1002b3fa
jae 0x1002b3f3
add esp, 4
jmp 0x1002b3ff
dec dword [esp]
jno 0x1002b404
jns 0x1002b3ef
jp 0x1002b408
add esp, 4
popf
jmp 0x1002b40f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002b428
jne 0x1002b428
call 0x1fc2e77c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1002e010
xor eax, eax
test eax, eax
je 0x1002b447
jne 0x1002b446
call 0x9306a4ce
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
test byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002b455
jmp 0x1002b457
je 0x1002b452
clc
jae 0x1002b45c
xor al, byte [esp + esi*2 - 0x7bfe8afd]
je 0x1002b461
jne 0x1002b461
test byte [esi - 0x64], ah
pushf
push 0xa
jae 0x1002b46e
jmp 0x1002b469
call 0x1002b470
jae 0x1002b469
add esp, 4
jmp 0x1002b475
dec dword [esp]
jno 0x1002b47a
jns 0x1002b465
jp 0x1002b47e
add esp, 4
popf
jmp 0x1002b485
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002b49e
jne 0x1002b49e
call 0x1fc2e7f2
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1002e230
xor eax, eax
test eax, eax
je 0x1002b4bd
jne 0x1002b4bc
call 0x9306a544
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
dec ebp
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002b4cb
jmp 0x1002b4cd
je 0x1002b4c8