Function at 0x10004950
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x1000a1e8
push 0x10006163
mov eax, dword fs:[0]
push eax
sub esp, 0x338
push ebx
push esi
push edi
mov eax, dword [0x1000b040]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 4], 0
jmp 0x1000499f
jmp 0x100049b1
jmp 0x100049c3
jmp 0x100049d5
movaps xmm0, xmmword [0x10009160]
movups xmmword [ebp - 0xb4], xmm0
movaps xmm0, xmmword [0x10009330]
movups xmmword [ebp - 0xa4], xmm0
movaps xmm0, xmmword [0x10009170]
movups xmmword [ebp - 0x94], xmm0
movaps xmm0, xmmword [0x10009230]
movups xmmword [ebp - 0x84], xmm0
movaps xmm0, xmmword [0x100091f0]
movups xmmword [ebp - 0x74], xmm0
movaps xmm0, xmmword [0x10009190]
movups xmmword [ebp - 0x64], xmm0
movaps xmm0, xmmword [0x10009210]
movups xmmword [ebp - 0x54], xmm0
movaps xmm0, xmmword [0x10009200]
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x34], 0x53
xor esi, esi
mov dword [ebp - 0x1c], esi
lea ecx, [ebp - 0xb3]
cmp esi, 0x80
jae 0x10004a71
push esi
call fcn.100058b0
mov bl, byte [ebp - 0xb4]
xor bl, byte [eax]
push esi
lea ecx, [ebp - 0xb3]
call fcn.100058b0
mov byte [eax], bl
inc esi
jmp 0x10004a41
push 0x80
call fcn.100058b0
mov byte [eax], 0
lea ecx, [ebp - 0xb3]
call fcn.100058a0
mov dword [0x1000b474], eax
movaps xmm0, xmmword [0x10008430]
movups xmmword [ebp - 0x138], xmm0
movaps xmm0, xmmword [0x100084f0]
movups xmmword [ebp - 0x128], xmm0
movaps xmm0, xmmword [0x10008420]
movups xmmword [ebp - 0x118], xmm0
movaps xmm0, xmmword [0x10008320]
movups xmmword [ebp - 0x108], xmm0
movaps xmm0, xmmword [0x10008370]
movups xmmword [ebp - 0xf8], xmm0
movaps xmm0, xmmword [0x10008450]
movups xmmword [ebp - 0xe8], xmm0
movaps xmm0, xmmword [str._r_f_r_r]
movups xmmword [ebp - 0xd8], xmm0
movaps xmm0, xmmword [0x10008360]
movups xmmword [ebp - 0xc8], xmm0
mov word [ebp - 0xb8], 4
xor esi, esi
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0x137]
cmp esi, 0x80
jae 0x10004b39
push esi
call fcn.100058b0
mov bl, byte [ebp - 0x138]
xor bl, byte [eax]
push esi
lea ecx, [ebp - 0x137]
call fcn.100058b0
mov byte [eax], bl
inc esi
jmp 0x10004b09
push 0x80
call fcn.100058b0
mov byte [eax], 0
lea ecx, [ebp - 0x137]
call fcn.100058a0
mov dword [0x1000b478], eax
movaps xmm0, xmmword [0x10008780]
movups xmmword [ebp - 0x1bc], xmm0
movaps xmm0, xmmword [0x100086c0]
movups xmmword [ebp - 0x1ac], xmm0
movaps xmm0, xmmword [0x10008770]
movups xmmword [ebp - 0x19c], xmm0
movaps xmm0, xmmword [0x100086d0]
movups xmmword [ebp - 0x18c], xmm0
movaps xmm0, xmmword [0x10008800]
movups xmmword [ebp - 0x17c], xmm0
movaps xmm0, xmmword [0x10008760]
movups xmmword [ebp - 0x16c], xmm0
movaps xmm0, xmmword [0x100087f0]
movups xmmword [ebp - 0x15c], xmm0
movaps xmm0, xmmword [0x10008810]
movups xmmword [ebp - 0x14c], xmm0
mov word [ebp - 0x13c], 0x1f
xor esi, esi
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x1bb]
cmp esi, 0x80
jae 0x10004c01
push esi
call fcn.100058b0
mov bl, byte [ebp - 0x1bc]
xor bl, byte [eax]
push esi
lea ecx, [ebp - 0x1bb]
call fcn.100058b0
mov byte [eax], bl
inc esi
jmp 0x10004bd1
push 0x80
call fcn.100058b0
mov byte [eax], 0
lea ecx, [ebp - 0x1bb]
call fcn.100058a0
mov dword [0x1000b47c], eax
jmp 0x10004c30
push 0
push 0
push 0x10003ef0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
add esp, 0xc
jmp 0x10004c54
jmp 0x10004c66
jmp 0x10004c78
jmp 0x10004c8a
movaps xmm0, xmmword [0x10008d50]
movups xmmword [ebp - 0x240], xmm0
movaps xmm0, xmmword [0x10008e80]
movups xmmword [ebp - 0x230], xmm0
movaps xmm0, xmmword [0x10008ef0]
movups xmmword [ebp - 0x220], xmm0
movaps xmm0, xmmword [0x10008e50]
movups xmmword [ebp - 0x210], xmm0
movaps xmm0, xmmword [0x10008fb0]
movups xmmword [ebp - 0x200], xmm0
movaps xmm0, xmmword [0x10008f80]
movups xmmword [ebp - 0x1f0], xmm0
movaps xmm0, xmmword [0x10008f60]
movups xmmword [ebp - 0x1e0], xmm0
movaps xmm0, xmmword [0x10008f20]
movups xmmword [ebp - 0x1d0], xmm0
mov word [ebp - 0x1c0], 0x3e
xor esi, esi
mov dword [ebp - 0x28], esi
lea ecx, [ebp - 0x23f]
cmp esi, 0x80
jae 0x10004d35
push esi
call fcn.100058b0
mov bl, byte [ebp - 0x240]
xor bl, byte [eax]
push esi
lea ecx, [ebp - 0x23f]
call fcn.100058b0
mov byte [eax], bl
inc esi
jmp 0x10004d05
push 0x80
call fcn.100058b0
mov byte [eax], 0
lea ecx, [ebp - 0x23f]
call fcn.100058a0
mov dword [0x1000b480], eax
movaps xmm0, xmmword [0x10008970]
movups xmmword [ebp - 0x2c4], xmm0
movaps xmm0, xmmword [0x10008c60]
movups xmmword [ebp - 0x2b4], xmm0
movaps xmm0, xmmword [0x10008bf0]
movups xmmword [ebp - 0x2a4], xmm0
movaps xmm0, xmmword [0x10008ca0]
movups xmmword [ebp - 0x294], xmm0
movaps xmm0, xmmword [0x10008b30]
movups xmmword [ebp - 0x284], xmm0
movaps xmm0, xmmword [0x10008b60]
movups xmmword [ebp - 0x274], xmm0
movaps xmm0, xmmword [0x10008b80]
movups xmmword [ebp - 0x264], xmm0
movaps xmm0, xmmword [0x10008b90]
movups xmmword [ebp - 0x254], xmm0
mov word [ebp - 0x244], 0x29
xor esi, esi
mov dword [ebp - 0x2c], esi
lea ecx, [ebp - 0x2c3]
cmp esi, 0x80
jae 0x10004dfd
push esi
call fcn.100058b0
mov bl, byte [ebp - 0x2c4]
xor bl, byte [eax]
push esi
lea ecx, [ebp - 0x2c3]
call fcn.100058b0
mov byte [eax], bl
inc esi
jmp 0x10004dcd
push 0x80
call fcn.100058b0
mov byte [eax], 0
lea ecx, [ebp - 0x2c3]
call fcn.100058a0
mov dword [0x1000b484], eax
movaps xmm0, xmmword [0x100095e0]
movups xmmword [ebp - 0x348], xmm0
movaps xmm0, xmmword [0x10009570]
movups xmmword [ebp - 0x338], xmm0
movaps xmm0, xmmword [0x10009580]
movups xmmword [ebp - 0x328], xmm0
movaps xmm0, xmmword [0x10009530]
movups xmmword [ebp - 0x318], xmm0
movaps xmm0, xmmword [0x100094d0]
movups xmmword [ebp - 0x308], xmm0
movaps xmm0, xmmword [0x10009490]
movups xmmword [ebp - 0x2f8], xmm0
movaps xmm0, xmmword [0x100094b0]
movups xmmword [ebp - 0x2e8], xmm0
movaps xmm0, xmmword [0x10009480]
movups xmmword [ebp - 0x2d8], xmm0
mov word [ebp - 0x2c8], 0x62
xor esi, esi
mov dword [ebp - 0x30], esi
lea ecx, [ebp - 0x347]
cmp esi, 0x80
jae 0x10004ec5
push esi
call fcn.100058b0
mov bl, byte [ebp - 0x348]
xor bl, byte [eax]
push esi
lea ecx, [ebp - 0x347]
call fcn.100058b0
mov byte [eax], bl
inc esi
jmp 0x10004e95
push 0x80
call fcn.100058b0
mov byte [eax], 0
lea ecx, [ebp - 0x347]
call fcn.100058a0
mov dword [0x1000b488], eax
jmp 0x10004ef4
jmp 0x10004eff
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret