Function at 0x10009181
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
cmp dword [0x1000fb2e], 0
jle 0x1000930e
push dword [0x1000fb2e]
call fcn.100097b4
push 0x1000fb6e
push dword [0x1000fb2e]
call fcn.100097e4
test eax, eax
je 0x1000930e
cmp dword [0x1000fb6e], 0
jne 0x1000930e
push 0
push dword [0x1000fb36]
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
nop
nop
push dword [0x1000fb02]
call fcn.10003bae
mov dword [ebp - 4], eax
push 0
push dword [ebp - 4]
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
nop
nop
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x100080e4
call fcn.100039f5
push 0x80000004
push 0
push str.OCWZNQj_FHZW_JZYF_TKIGW_nmE
push 1
mov ebx, 0x198
call fcn.1000ae20
add esp, 0x10
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
lea eax, [ebp - 4]
push eax
call fcn.10001f73
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10009273
push ebx
call fcn.1000a815
add esp, 4
push 0x80000005
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x10009286
mov eax, 0x1000f24e
push eax
push 1
mov ebx, 0x168
call fcn.1000af50
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100092ac
push ebx
call fcn.1000a815
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, 0x1000f751
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
push 0x30
lea eax, [ebp - 0x14]
push eax
call fcn.10003a73
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100092e6
push ebx
call fcn.1000a815
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100092f6
push ebx
call fcn.1000a815
add esp, 4
xor esp, esp
push esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
nop
nop
nop
nop
push eax
call fcn.10008083
jmp 0x100097b0
cmp dword [0x1000fb2a], 0
jle 0x10009492
push dword [0x1000fb2a]
call fcn.100097b4
push 0x1000fb72
push dword [0x1000fb2a]
call fcn.100097e4
test eax, eax
je 0x10009492
cmp dword [0x1000fb72], 0
jne 0x10009492
push 0
push dword [0x1000fb36]
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
nop
nop
push dword [0x1000fb02]
call fcn.10003bae
mov dword [ebp - 4], eax
push 0
push dword [ebp - 4]
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
nop
nop
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x100080e4
call fcn.100039f5
push 0x80000004
push 0
push str.OCWZNQj_FHZW_JZYF_TKIGW_nmE
push 1
mov ebx, 0x198
call fcn.1000ae20
add esp, 0x10
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
lea eax, [ebp - 4]
push eax
call fcn.10001f73
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100093f7
push ebx
call fcn.1000a815
add esp, 4
push 0x80000005
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x1000940a
mov eax, 0x1000f24e
push eax
push 1
mov ebx, 0x168
call fcn.1000af50
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10009430
push ebx
call fcn.1000a815
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, 0x1000f754
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
push 0x30
lea eax, [ebp - 0x14]
push eax
call fcn.10003a73
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1000946a
push ebx
call fcn.1000a815
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1000947a
push ebx
call fcn.1000a815
add esp, 4
xor esp, esp
push esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
nop
nop
nop
nop
push eax
call fcn.10008083
jmp 0x100097b0
cmp dword [0x1000fb0e], 0
jle 0x1000960b
push 0x1000fb76
push dword [0x1000fb0e]
call fcn.10009808
test eax, eax
je 0x1000960b
cmp dword [0x1000fb76], 0
jne 0x1000960b
push 0
push dword [0x1000fb36]
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
nop
nop
push dword [0x1000fb02]
call fcn.10003bae
mov dword [ebp - 4], eax
push 0
push dword [ebp - 4]
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
nop
nop
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x100080e4
call fcn.100039f5
push 0x80000004
push 0
push str.OCWZNQj_FHZW_JZYF_TKIGW_nmE
push 1
mov ebx, 0x198
call fcn.1000ae20
add esp, 0x10
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
lea eax, [ebp - 4]
push eax
call fcn.10001f73
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10009570
push ebx
call fcn.1000a815
add esp, 4
push 0x80000005
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x10009583
mov eax, 0x1000f24e
push eax
push 1
mov ebx, 0x168
call fcn.1000af50
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x100095a9
push ebx
call fcn.1000a815
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, 0x1000f757
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
push 0x30
lea eax, [ebp - 0x14]
push eax
call fcn.10003a73
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100095e3
push ebx
call fcn.1000a815
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100095f3
push ebx
call fcn.1000a815
add esp, 4
xor esp, esp
push esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
nop
nop
nop
nop
push eax
call fcn.10008083
jmp 0x100097b0
cmp dword [0x1000fb0a], 0
jle 0x10009628
push dword [0x1000fb0a]
call dword [sym.imp.NTDLL.DLL_ZwResumeProcess]
nop
nop
nop
nop
cmp dword [0x1000fb5a], 0
jne 0x1000978f
inc dword [0x1000faee]
cmp dword [0x1000faee], 5
jle 0x1000978f
push 0
push dword [0x1000fb36]
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
nop
nop
push dword [0x1000fb02]
call fcn.10003bae
mov dword [ebp - 4], eax
push 0
push dword [ebp - 4]
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
nop
nop
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x100080e4
call fcn.100039f5
push 0x80000004
push 0
push str.OCWZNQj_FHZW_JZYF_TKIGW_nmE
push 1
mov ebx, 0x198
call fcn.1000ae20
add esp, 0x10
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
lea eax, [ebp - 4]
push eax
call fcn.10001f73
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100096f4
push ebx
call fcn.1000a815
add esp, 4
push 0x80000005
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x10009707
mov eax, 0x1000f24e
push eax
push 1
mov ebx, 0x168
call fcn.1000af50
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1000972d
push ebx
call fcn.1000a815
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, 0x1000f75a
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
push 0x30
lea eax, [ebp - 0x14]
push eax
call fcn.10003a73
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10009767
push ebx
call fcn.1000a815
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10009777
push ebx
call fcn.1000a815
add esp, 4
xor esp, esp
push esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
nop
nop
nop
nop
push eax
call fcn.10008083
jmp 0x100097b0
cmp dword [0x1000fb5a], 1
jne 0x100097b0
mov dword [0x1000faee], 0
mov dword [0x1000fb5a], 0
mov esp, ebp
pop ebp
ret