Function at 0x1002f2d0
Capabilities:
Contain obfuscated stackstrings
Execute command
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10041d06
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4b0
mov dword [ebp - 0x4a8], ecx
jmp 0x1002f306
movzx eax, byte [ebp + 8]
push eax
call fcn.1002f240
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jle 0x1002f62f
call fcn.10001480
movzx ecx, al
test ecx, ecx
je 0x1002f62f
mov byte [ebp - 0x45c], 0x47
mov byte [ebp - 0x45b], 0x61
mov byte [ebp - 0x45a], 0x6d
mov byte [ebp - 0x459], 0x65
mov byte [ebp - 0x458], 0x20
mov byte [ebp - 0x457], 0x49
mov byte [ebp - 0x456], 0x6e
mov byte [ebp - 0x455], 0x74
mov byte [ebp - 0x454], 0x65
mov byte [ebp - 0x453], 0x67
mov byte [ebp - 0x452], 0x72
mov byte [ebp - 0x451], 0x69
mov byte [ebp - 0x450], 0x74
mov byte [ebp - 0x44f], 0x79
mov byte [ebp - 0x44e], 0x20
mov byte [ebp - 0x44d], 0x66
mov byte [ebp - 0x44c], 0x61
mov byte [ebp - 0x44b], 0x69
mov byte [ebp - 0x44a], 0x6c
mov byte [ebp - 0x449], 0x65
mov byte [ebp - 0x448], 0x64
mov byte [ebp - 0x447], 0x2e
mov byte [ebp - 0x446], 0x20
mov byte [ebp - 0x445], 0x54
mov byte [ebp - 0x444], 0x72
mov byte [ebp - 0x443], 0x79
mov byte [ebp - 0x442], 0x20
mov byte [ebp - 0x441], 0x74
mov byte [ebp - 0x440], 0x6f
mov byte [ebp - 0x43f], 0x20
mov byte [ebp - 0x43e], 0x64
mov byte [ebp - 0x43d], 0x69
mov byte [ebp - 0x43c], 0x73
mov byte [ebp - 0x43b], 0x61
mov byte [ebp - 0x43a], 0x62
mov byte [ebp - 0x439], 0x6c
mov byte [ebp - 0x438], 0x65
mov byte [ebp - 0x437], 0x20
mov byte [ebp - 0x436], 0x61
mov byte [ebp - 0x435], 0x6e
mov byte [ebp - 0x434], 0x74
mov byte [ebp - 0x433], 0x69
mov byte [ebp - 0x432], 0x76
mov byte [ebp - 0x431], 0x69
mov byte [ebp - 0x430], 0x72
mov byte [ebp - 0x42f], 0x75
mov byte [ebp - 0x42e], 0x73
mov byte [ebp - 0x42d], 0x65
mov byte [ebp - 0x42c], 0x73
mov byte [ebp - 0x42b], 0x20
mov byte [ebp - 0x42a], 0x74
mov byte [ebp - 0x429], 0x68
mov byte [ebp - 0x428], 0x65
mov byte [ebp - 0x427], 0x6e
mov byte [ebp - 0x426], 0x20
mov byte [ebp - 0x425], 0x74
mov byte [ebp - 0x424], 0x72
mov byte [ebp - 0x423], 0x79
mov byte [ebp - 0x422], 0x20
mov byte [ebp - 0x421], 0x61
mov byte [ebp - 0x420], 0x67
mov byte [ebp - 0x41f], 0x61
mov byte [ebp - 0x41e], 0x69
mov byte [ebp - 0x41d], 0x6e
mov byte [ebp - 0x41c], 0
lea edx, [ebp - 0x45c]
push edx
push 0x2000
lea eax, [ebp - 0x414]
push eax
call fcn.1003dbf0
add esp, 0xc
call fcn.10010230
call fcn.1002a760
mov ecx, 0x951f7be1
push ecx
lea ecx, [ebp - 0x485]
call fcn.1001c1e0
mov dword [ebp - 0x4ac], eax
mov edx, dword [ebp - 0x4ac]
push edx
call sub.MSVCR90.dll_system
add esp, 4
lea ecx, [ebp - 0x485]
call fcn.1001ba00
call fcn.100037d0
movzx eax, al
test eax, eax
je 0x1002f582
mov ecx, dword [0x1007f370]
call fcn.100014a0
push eax
push 0
lea ecx, [ebp - 0x414]
push ecx
push 1
lea edx, [ebp - 0x414]
push edx
mov ecx, dword [0x1007f374]
call fcn.1000f4e0
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x1002f641
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4