Function at 0x1002649c
Capabilities:
Create thread

Disassembly:
jae 0x100261fc
jmp 0x100261f7
call fcn.100261fe
jae 0x100261f7
add esp, 4
jmp 0x10026203
dec dword [esp]
jno 0x10026208
jns 0x100261f3
jp 0x1002620c
add esp, 4
popf
jmp 0x10026213
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002622c
jne 0x1002622c
call 0x1fc29580
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10028c20
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x1002625b
jne 0x1002625a
call 0x930652e2
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
aaa
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10026269
jmp 0x1002626b
je 0x10026266
clc
jae 0x10026270
loopne 0x100262a7
je 0x10026275
jne 0x10026275
aaa
pushf
push 0xa
jae 0x10026282
jmp 0x1002627d
call 0x10026284
jae 0x1002627d
add esp, 4
jmp 0x10026289
dec dword [esp]
jno 0x1002628e
jns 0x10026279
jp 0x10026292
add esp, 4
popf
jmp 0x10026299
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100262b2
add byte [eax + 3], bl
ret 0x585a
jne 0x100262b2
call 0x1fc29606
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10028f70
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x100262e1
jne 0x100262e0
call 0x93065368
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
pop eax
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100262ef
jmp 0x100262f1
je 0x100262ec
clc
jae 0x100262f6
test dword [eax + 0x74], ebx
add esi, dword [ebp + 1]
je 0x100262fb
jne 0x100262fb
pop eax
pushf
push 0xa
jae 0x10026308
jmp 0x10026303
call 0x1002630a
jae 0x10026303
add esp, 4
jmp 0x1002630f
dec dword [esp]
jno 0x10026314
jns 0x100262ff
jp 0x10026318
add esp, 4
popf
jmp 0x1002631f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10026338
jne 0x10026338
call 0x1fc2968c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10028c60
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x10026367
jne 0x10026366
call 0x930653ee
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
and dword [ebx + edi*8 - 8], esi
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10026375
jmp 0x10026377
je 0x10026372
clc
jae 0x1002637c
das
and dword [ebx + eax + 0x75], esi
add dword [ecx], esp
je 0x10026381
jne 0x10026381
and dword [esi - 0x64], esp
pushf
push 0xa
jae 0x1002638e
jmp 0x10026389
call 0x10026390
jae 0x10026389
add esp, 4
jmp 0x10026395
dec dword [esp]
jno 0x1002639a
jns 0x10026385
jp 0x1002639e
add esp, 4
popf
jmp 0x100263a5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100263be
jne 0x100263be
call 0x1fc29712
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10028cd0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x100263ed
jne 0x100263ec
call 0x93065474
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
out 0x74, eax
sti
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100263fb
jmp 0x100263fd
je 0x100263f8
clc
jae 0x10026402
salc
out 0x74, eax
add esi, dword [ebp + 1]
je 0x10026407
jne 0x10026407
out 0x66, eax
pushfd
pushf
push 0xa
jae 0x10026414
jmp 0x1002640f
call 0x10026416
jae 0x1002640f
add esp, 4
jmp 0x1002641b
dec dword [esp]
jno 0x10026420
jns 0x1002640b
jp 0x10026424
add esp, 4
popf
jmp 0x1002642b
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10026444
jne 0x10026444
call 0x1fc29798
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10028d40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x10026473
jne 0x10026472
call 0x930654fa
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
mov al, 0x74
sti
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10026481
jmp 0x10026483
je 0x1002647e
clc
jae 0x10026488
xor byte [eax + 0x1750374], 0xb0
je 0x1002648d
jne 0x1002648d
mov al, 0x66
pushfd
pushf
push 0xa
jae 0x1002649a
jmp 0x10026495
call 0x1002649c
jae 0x10026495
add esp, 4
jmp 0x100264a1
dec dword [esp]
jno 0x100264a6
jns 0x10026491
jp 0x100264aa
add esp, 4
popf
jmp 0x100264b1
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100264ca
jne 0x100264ca
call 0x1fc2981e
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10028db0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x100264f9
jne 0x100264f8
call 0x93065580
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
jns 0x1002657c
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10026507
jmp 0x10026509
je 0x10026504
sti
clc
jae 0x1002650e
sub bh, byte [ecx + 0x74]
add esi, dword [ebp + 1]
je 0x10026513
jne 0x10026513
jns 0x1002657a
pushf
pushfd
push 0xa
jae 0x10026520
jmp 0x1002651b
call 0x10026522
jae 0x1002651b
add esp, 4
jmp 0x10026527
dec dword [esp]
jno 0x1002652c
jns 0x10026517
jp 0x10026530
add esp, 4
popf
jmp 0x10026537
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10026550
jne 0x10026550
call 0x1fc298a4
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10028e20
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x1002657f
jne 0x1002657e
call 0x93065606
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
lcall 0xcc02, 0x73f8fb74
lcall 0x669a, 0x1750374
pushfd
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002658d
jmp 0x1002658f
je 0x1002658a
clc
jae 0x10026594
int3
je 0x10026599
jne 0x10026599
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x100265a6
jmp 0x100265a1
call 0x100265a8
jae 0x100265a1
add esp, 4
jmp 0x100265ad
dec dword [esp]
jno 0x100265b2
jns 0x1002659d
jp 0x100265b6
add esp, 4
popf
jmp 0x100265bd
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100265d6
jne 0x100265d6
call 0x1fc2992a
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10028e90
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor eax, eax
test eax, eax
je 0x10026605
jne 0x10026604
call 0x9306568c
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
arpl word [ebx + edi*8 - 8], si
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10026613
jmp 0x10026615
je 0x10026610
clc
jae 0x1002661a
jbe 0x1002667d
je 0x1002661f
jne 0x1002661f
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1002662c
jmp 0x10026627
call 0x1002662e
jae 0x10026627
add esp, 4
jmp 0x10026633
dec dword [esp]
jno 0x10026638
jns 0x10026623
jp 0x1002663c
add esp, 4
popf
jmp 0x10026643
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002665c
jne 0x1002665c
call 0x1fc299b0
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10028f00
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
adc eax, sym.imp.KERNEL32.dll_CreateThread
xor eax, eax
test eax, eax
je 0x1002668b
jne 0x1002668a
call 0x93065712
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sub al, 0x74
sti
clc
jae 0x100266a0
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10026699
jmp 0x1002669b
je 0x10026696