Function at 0x1004aa5
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x45c
mov eax, dword [reloc.KERNEL32.dll_LocalFree]
push ebx
push esi
push edi
xor ebx, ebx
push ebx
mov esi, ecx
push 0x20019
mov dword [ebp - 4], eax
push ebx
lea eax, [esi + 4]
push eax
push dword [esi]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.0100826b
push dword [esi + 0x244]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
mov ecx, esi
call fcn.010047fc
push eax
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.010082e8
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003272
mov edi, 0x1001394
lea ecx, reloc.KERNEL32.dll_LocalFree
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
lea ecx, reloc.KERNEL32.dll_LocalFree
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
lea ecx, reloc.KERNEL32.dll_LocalFree
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
push dword [esi + 0x248]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
push ebx
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008116
lea ecx, reloc.KERNEL32.dll_LocalFree
mov dword [esi + reloc.KERNEL32.dll_LocalFree], eax
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
push dword [esi + 0x24c]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
push 0x1770
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008116
lea ecx, reloc.KERNEL32.dll_LocalFree
mov dword [esi + reloc.KERNEL32.dll_LocalFree], eax
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
push dword [esi + 0x250]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
push ebx
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008116
test eax, eax
setne al
lea ecx, reloc.KERNEL32.dll_LocalFree
mov byte [esi + 0x22c], al
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
push dword [esi + 0x254]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
push 0x5a
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008116
lea ecx, reloc.KERNEL32.dll_LocalFree
mov dword [esi + reloc.KERNEL32.dll_LocalFree], eax
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
push dword [esi + 0x258]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
push ebx
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008116
test eax, eax
setne al
lea ecx, reloc.KERNEL32.dll_LocalFree
mov byte [esi + 0x234], al
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
push dword [esi + 0x25c]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
push ebx
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008116
test eax, eax
setne al
lea ecx, reloc.KERNEL32.dll_LocalFree
mov byte [esi + 0x235], al
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
push dword [esi + 0x260]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
push 1
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008116
test eax, eax
setne al
lea ecx, reloc.KERNEL32.dll_LocalFree
mov byte [esi + 0x236], al
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
push dword [esi + 0x264]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
push 0x3e8
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008116
lea ecx, reloc.KERNEL32.dll_LocalFree
mov dword [esi + reloc.KERNEL32.dll_LocalFree], eax
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
push dword [esi + 0x268]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
push 0x10000
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008116
lea ecx, reloc.KERNEL32.dll_LocalFree
mov dword [esi + reloc.KERNEL32.dll_LocalFree], eax
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
push dword [esi + 0x26c]
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01003295
push 0xc8
lea eax, reloc.KERNEL32.dll_LocalFree
push eax
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008116
lea ecx, reloc.KERNEL32.dll_LocalFree
mov dword [esi + reloc.KERNEL32.dll_LocalFree], eax
mov dword [ebp - reloc.KERNEL32.dll_LocalFree], edi
call fcn.01001b60
lea ecx, reloc.KERNEL32.dll_LocalFree
call fcn.01008239
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.01007ca0
leave
ret