Function at 0x10029080
Capabilities:
Contain obfuscated stackstrings
Create thread
Resolve function by parsing pe exports
Set console window title

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xa8
mov eax, dword [0x1004b00c]
xor eax, esp
mov dword [esp + 0xa4], eax
cmp dword [ebp + 0xc], 1
push esi
mov esi, dword [ebp + 8]
push edi
jne 0x10029490
push esi
call dword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call edi
call dword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
je 0x1002922b
push 1
mov word [esp + 0x18], 0x7477
mov byte [esp + 0x1a], 0
mov dword [esp + 0x78], 0x4f4e4f43
mov dword [esp + 0x7c], 0x245455
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x7c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
add esp, 0xc
push str.moonware_debug
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
push 7
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._moonware.pub_debug_by_moonrise__tg__lagprediction
call fcn.100294b0
mov ecx, eax
call fcn.100296f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._Discord__moonrise2115
call fcn.100294b0
mov ecx, eax
call fcn.100296f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._Build_v2.5.2
call fcn.100294b0
mov ecx, eax
call fcn.100296f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._Date:
call fcn.100294b0
mov edx, str.Jan_13_2024
mov ecx, eax
call fcn.100294b0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.100296f0
cmp byte [0x10103df8], 0
je 0x100291d9
push 0x10029910
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._Config_loading...
call fcn.100294b0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x10029910
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._Upload_successful_
call fcn.100294b0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp byte [0x10103df7], 0
je 0x10029224
push 0x10029910
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._Saving_the_config...
call fcn.100294b0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x10029910
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._Save_was_successful_
call fcn.100294b0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x7d0
call edi
mov ecx, 0xa4
xor edx, edx
mov al, byte [edx + 0x10044d98]
xor al, cl
inc ecx
mov byte [esp + edx + 0x80], al
and ecx, 0x800000ff
jns 0x10029252
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x10029232
push 0x10028f50
lea eax, [esp + 0x84]
mov byte [esp + 0x90], 0
push eax
lea eax, [esp + 0x7c]
mov dword [esp + 0x7c], 0x72657375
push eax
mov dword [esp + 0x84], 0x642e3233
mov word [esp + 0x88], 0x6c6c
mov byte [esp + 0x8a], 0
call fcn.10001750
push eax
call fcn.100010f0
mov dword [0x100d1a00], eax
mov ecx, 0x10
xor edx, edx
nop
mov al, byte [edx + str.WtfPagexjIuh]
xor al, cl
inc ecx
mov byte [esp + edx + 0x80], al
and ecx, 0x800000ff
jns 0x100292d0
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x100292b0
push 0x10028fa0
lea eax, [esp + 0x84]
mov byte [esp + 0x90], 0
push eax
lea eax, [esp + 0x7c]
mov dword [esp + 0x7c], 0x72657375
push eax
mov dword [esp + 0x84], 0x642e3233
mov word [esp + 0x88], 0x6c6c
mov byte [esp + 0x8a], 0
call fcn.10001750
push eax
call fcn.100010f0
push 0x104
push 0x100d1a08
push esi
mov dword [0x100d19fc], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0
push 0
push esi
push 0x10028090
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xorps xmm0, xmm0
mov dword [0x100d1428], esi
sub esp, 8
movaps xmmword [esp + 0x88], xmm0
lea edx, [esp + 0x88]
movq qword [esp + 0x98], xmm0
call fcn.100135f0
push 0x58
lea eax, [esp + 0x24]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword fs:[0x2c]
add esp, 0x14
mov ecx, dword [0x100d13d0]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x102f73a0]
cmp eax, dword [ecx + 4]
jle 0x100293d9
push 0x102f73a0
call fcn.100380f9
add esp, 4
cmp dword [0x102f73a0], 0xffffffff
jne 0x100293d9
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
mov dword [0x102f73a8], eax
mov dword [0x102f73ac], edx
push 0x102f73a0
call fcn.100380af
add esp, 4
mov ecx, dword [0x102f73ac]
mov eax, dword [0x102f73a8]
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x18]
mov dword [esp + 0x34], str.Moonware.pub__debug
mov dword [esp + 0x18], str.Online
mov dword [esp + 0x1c], str.Competitive
mov dword [esp + 0x30], str.logo
mov dword [esp + 0x20], eax
mov dword [esp + 0x38], 0x10040db6
mov dword [esp + 0x3c], 0x10040db7
mov dword [esp + 0x44], 0x10040dc3
mov dword [esp + 0x48], 0x10040dcb
mov dword [esp + 0x4c], 0x10040dd3
mov dword [esp + 0x50], 0x10040dde
call fcn.10013bd0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, eax
push edi
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov dword [esp + 0x14], eax
cmp eax, 0x80
jge 0x1002946b
push 0x80
push edi
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov esi, eax
push 1
push esi
call dword [sym.imp.KERNEL32.dll_SetThreadAffinityMask]
push 2
push esi
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push dword [esp + 0x14]
push edi
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov ecx, dword [esp + 0xac]
mov eax, 1
pop edi
pop esi
xor ecx, esp
call fcn.10037c8d
mov esp, ebp
pop ebp
ret 0xc