Function at 0x100f26a0
Capabilities:
Create thread
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1019ce03
mov eax, dword fs:[0]
push eax
sub esp, 0xc4
mov eax, dword [0x101f6e00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0
push 0
push 0x100f2680
push 0
push 0
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
movaps xmm0, xmmword [0x101def10]
xor ecx, ecx
mov eax, dword [0x10297f7c]
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x30], 0x72756f68
movaps xmm0, xmmword [0x101dec80]
movups xmmword [ebp - 0x50], xmm0
mov byte [eax + 0x154], 0
movaps xmm0, xmmword [0x101dedf0]
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x2c], 0x69726774
mov dword [ebp - 0x28], 0xc2874
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x5f]
xor al, byte [ebp - 0x60]
mov byte [ebp + ecx - 0x5f], al
inc ecx
cmp ecx, 0x3a
jb 0x100f2730
lea eax, [ebp - 0x5f]
mov byte [ebp - 0x25], 0
push eax
lea ecx, [ebp - 0x98]
call fcn.10046c60
mov byte [ebp - 4], 1
xor ecx, ecx
movaps xmm0, xmmword [0x101dde50]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x2c], 0x4f060402
movaps xmm0, xmmword [0x101ddcc0]
movups xmmword [ebp - 0x3c], xmm0
mov word [ebp - 0x28], 0x43
nop dword [eax]
mov al, byte [ebp + ecx - 0x4b]
xor al, byte [ebp - 0x4c]
mov byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x24
jb 0x100f2780
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x27], 0
push eax
lea ecx, [ebp - 0x7c]
call fcn.10046c60
mov byte [ebp - 4], 2
xor ecx, ecx
movaps xmm0, xmmword [0x101defc0]
movups xmmword [ebp - 0x48], xmm0
mov byte [ebp - 0x28], 0
movaps xmm0, xmmword [0x101de080]
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp + ecx - 0x47]
xor al, byte [ebp - 0x48]
mov byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x1f
jb 0x100f27c1
lea eax, [ebp - 0x47]
mov byte [ebp - 0x28], 0
push eax
lea ecx, [ebp - 0xb4]
call fcn.10046c60
mov edx, 0x101d47e8
mov byte [ebp - 4], 3
lea ecx, [ebp + 8]
call fcn.10066a00
test al, al
je 0x100f2883
lea eax, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x98]
lea ecx, [ebp - 0x40]
call fcn.10081340
add esp, 4
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 4
push ecx
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.100ecb00
movaps xmm0, xmmword [0x101de9d0]
add esp, 4
mov edx, eax
mov word [ebp - 0x14], 0x48
movups xmmword [ebp - 0x24], xmm0
xor ecx, ecx
mov al, byte [ebp + ecx - 0x23]
xor al, byte [ebp - 0x24]
mov byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0x10
jb 0x100f2843
push 0x30
lea eax, [ebp - 0x23]
mov byte [ebp - 0x13], 0
push eax
mov ecx, edx
call fcn.10046b50
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0xd0]
call fcn.10046bc0
lea ecx, [ebp - 0x40]
call fcn.10046bc0
jmp 0x100f28cc
movaps xmm0, xmmword [0x101de660]
xor ecx, ecx
movups xmmword [ebp - 0x24], xmm0
mov word [ebp - 0x14], 0x5c
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x23]
xor al, byte [ebp - 0x24]
mov byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0x10
jb 0x100f28a0
push 0x30
lea eax, [ebp - 0x23]
mov byte [ebp - 0x13], 0
push eax
lea ecx, [ebp + 8]
call fcn.10046b50
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.1015c310
int3