Function at 0x1000622a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x31c
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetClassNameA]
push edi
xor ebx, ebx
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
lea eax, [ebp - 0x10c]
push eax
push ebx
mov byte [ebp - 0x10c], 0x30
mov byte [ebp - 0x10b], 0x61
mov byte [ebp - 0x10a], 0x63
mov byte [ebp - 0x109], 0x34
mov byte [ebp - 0x108], 0x66
mov byte [ebp - 0x107], 0x36
mov byte [ebp - 0x106], 0x39
mov byte [ebp - 0x105], 0x62
mov byte [ebp - 0x104], 0x2d
mov byte [ebp - 0x103], 0x36
mov byte [ebp - 0x102], 0x63
mov byte [ebp - 0x101], 0x33
mov byte [ebp - 0x100], 0x66
mov byte [ebp - 0xff], 0x2d
mov byte [ebp - 0xfe], 0x34
mov byte [ebp - 0xfd], 0x30
mov byte [ebp - 0xfc], 0x66
mov byte [ebp - 0xfb], 0x38
mov byte [ebp - 0xfa], 0x2d
mov byte [ebp - 0xf9], 0x39
mov byte [ebp - 0xf8], 0x34
mov byte [ebp - 0xf7], 0x34
mov byte [ebp - 0xf6], 0x66
mov byte [ebp - 0xf5], 0x2d
mov byte [ebp - 0xf4], 0x39
mov byte [ebp - 0xf3], 0x37
mov byte [ebp - 0xf2], 0x39
mov byte [ebp - 0xf1], 0x31
mov byte [ebp - 0xf0], 0x36
mov byte [ebp - 0xef], 0x32
mov byte [ebp - 0xee], 0x61
mov byte [ebp - 0xed], 0x31
mov byte [ebp - 0xec], 0x66
mov byte [ebp - 0xeb], 0x35
mov byte [ebp - 0xea], 0x65
mov byte [ebp - 0xe9], 0x62
mov byte [ebp - 0xe8], bl
call fcn.1000557c
pop ecx
pop ecx
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x100065ce
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push dword [ebp + 8]
xor eax, eax
cmp byte [ebp + 0x10], bl
sete al
inc eax
mov dword [ebp - 0x31c], eax
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp + 0xc]
push ebx
push ebx
push ebx
mov dword [ebp - 0x318], eax
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
mov byte [ebp - 0x210], 0x65
mov byte [ebp - 0x20f], 0x62
mov byte [ebp - 0x20e], 0x39
mov byte [ebp - 0x20d], 0x62
mov byte [ebp - 0x20c], 0x61
mov byte [ebp - 0x20b], 0x31
mov byte [ebp - 0x20a], 0x65
lea eax, [ebp - 0x210]
push eax
mov byte [ebp - 0x209], 0x30
mov byte [ebp - 0x208], 0x2d
mov byte [ebp - 0x207], 0x64
mov byte [ebp - 0x206], 0x65
mov byte [ebp - 0x205], 0x38
mov byte [ebp - 0x204], 0x34
mov byte [ebp - 0x203], 0x2d
mov byte [ebp - 0x202], 0x34
mov byte [ebp - 0x201], 0x30
mov byte [ebp - 0x200], 0x31
mov byte [ebp - 0x1ff], 0x37
mov byte [ebp - 0x1fe], 0x2d
mov byte [ebp - 0x1fd], 0x62
mov byte [ebp - 0x1fc], 0x30
mov byte [ebp - 0x1fb], 0x35
mov byte [ebp - 0x1fa], 0x36
mov byte [ebp - 0x1f9], 0x2d
mov byte [ebp - 0x1f8], 0x34
mov byte [ebp - 0x1f7], 0x63
mov byte [ebp - 0x1f6], 0x61
mov byte [ebp - 0x1f5], 0x62
mov byte [ebp - 0x1f4], 0x61
mov byte [ebp - 0x1f3], 0x62
mov byte [ebp - 0x1f2], 0x30
mov byte [ebp - 0x1f1], 0x32
mov byte [ebp - 0x1f0], 0x65
mov byte [ebp - 0x1ef], 0x37
mov byte [ebp - 0x1ee], 0x61
mov byte [ebp - 0x1ed], 0x34
mov byte [ebp - 0x1ec], bl
call fcn.10005554
pop ecx
push ebx
push ebx
push ebx
mov dword [ebp - 4], eax
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
lea eax, [ebp - 0x31c]
push eax
call fcn.10005f5e
cmp dword [ebp - 4], ebx
pop ecx
je 0x1000656e
cmp al, bl
je 0x10006565
cmp byte [ebp + 0x14], bl
je 0x10006565
push 0xffffffffffffffff
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
call edi
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
call esi
pop edi
pop esi
pop ebx
leave
ret