Function at 0x1000bac0
Capabilities:
Create thread
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
push edi
push 0x100
mov ebx, edx
mov edi, ecx
push 0
push 0x1013c168
mov dword [ebp - 0xc], ebx
call fcn.1000e330
movaps xmm1, xmmword [0x1002c660]
add esp, 0xc
movaps xmm2, xmmword [str._f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_feeeeeeeeeeeeeeee]
xor eax, eax
nop dword [eax]
nop dword [eax + eax]
movups xmm0, xmmword [eax + 0x1002a708]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [eax + 0x1013c168], xmm0
movups xmm0, xmmword [eax + 0x1002a718]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [eax + 0x1013c178], xmm0
movups xmm0, xmmword [eax + 0x1002a728]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [eax + 0x1013c188], xmm0
movups xmm0, xmmword [eax + 0x1002a738]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [eax + 0x1013c198], xmm0
add eax, 0x40
cmp eax, 0x100
jb 0x1000bb00
push dword [ebp + 0xc]
push 1
push ebx
push 0x1013c168
push 0
push 0x10130ac0
call fcn.100083d0
mov eax, dword [0x1013aa6c]
add esp, 0x18
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov ebx, dword [sym.imp.USER32.dll_UnregisterClassA]
test eax, eax
je 0x1000bbae
push 0
push 0
push 0x10
push eax
call esi
push dword [0x1013bcd0]
mov dword [0x1013aa6c], 0
push dword [0x1013aa84]
call ebx
mov eax, dword [0x1013ab94]
test eax, eax
je 0x1000bbd8
push 0
push 0
push 0x10
push eax
call esi
push dword [0x1013bcd0]
mov dword [0x1013ab94], 0
push dword [0x1013abac]
call ebx
mov eax, dword [0x1013acbc]
test eax, eax
je 0x1000bc02
push 0
push 0
push 0x10
push eax
call esi
push dword [0x1013bcd0]
mov dword [0x1013acbc], 0
push dword [0x1013acd4]
call ebx
mov eax, dword [ebp - 0xc]
sub eax, 0
je 0x1000bc39
sub eax, 1
je 0x1000bc2b
sub eax, 1
jne 0x1000bc20
lea ebx, [eax + 0x6a]
mov dword [ebp - 8], 0x2b2bb9
jmp 0x1000bc45
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 8], eax
jmp 0x1000bc45
mov ebx, 0x69
mov dword [ebp - 8], 0x116896
jmp 0x1000bc45
mov ebx, 0x67
mov dword [ebp - 8], 0x9ca476
push dword [ebp + 0xc]
mov esi, dword [0x1013bcd0]
lea eax, [edi + 0x21]
push 0xff
push eax
mov byte [edi + 0x20], 1
call fcn.1001033b
mov eax, dword [ebp - 8]
add esp, 0xc
mov dword [edi + 0x120], eax
movzx eax, bx
push 0
push 0
push 0
push 0
push eax
push esi
call dword [sym.imp.USER32.dll_LoadImageA]
mov ebx, dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, eax
mov eax, dword [edi + 0x18]
test eax, eax
je 0x1000bc91
push eax
call ebx
mov dword [edi + 0x18], 0
test esi, esi
je 0x1000bccf
lea eax, [ebp - 0x24]
mov dword [edi + 0x18], esi
push eax
push 0x18
push esi
call dword [sym.imp.GDI32.dll_GetObjectA]
test eax, eax
jne 0x1000bcc3
mov eax, dword [edi + 0x18]
test eax, eax
je 0x1000bcba
push eax
call ebx
mov dword [edi + 0x18], 0
jmp 0x1000bccf
mov eax, dword [ebp - 0x20]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0x14], eax
mov eax, dword [edi + 4]
mov dword [edi + 0xc], 0x808080
test eax, eax
je 0x1000bd10
cmp dword [0x1013bdfc], 0
je 0x1000bd10
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
or eax, 0x80000
push eax
push 0xffffffffffffffec
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 1
push 0
push dword [edi + 0xc]
push dword [edi + 4]
call dword [0x1013bdfc]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push 0
push 0
push edi
push 0x1000ba50
push 0
push 0
mov dword [edi + 8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0xffffffffffffffff
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp + 0x10]
test eax, eax
jle 0x1000bd5d
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0xc], 0
jne 0x1000bd64
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, edi
call fcn.1000b480
call fcn.1000b560
int3