Function at 0x10029868
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x150
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1002a135
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xa8], eax
lea eax, [ebp + 8]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0xa0], 0x45
mov dword [ebp - 0x48], 0x76c56d2
mov dword [ebp - 0x140], 0x680a2560
mov dword [ebp - 0x13c], 0x680a2560
mov dword [ebp - 0x138], 0x680a2560
mov dword [ebp - 0x134], 0x680a2560
mov dword [ebp - 0xd0], 0xffffffff
mov dword [ebp - 0x20], 0
jmp 0x100298e9
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x100298fc
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x18], 0x5568
jmp 0x100298e2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
je 0x10029b82
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 0x28], 0xfff7
mov dword [ebp - 0xec], 0x3cd4fe93
cmp dword [ebp - 0x14], 0
je 0x10029a58
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x1c], 1
jl 0x1002994a
mov dword [ebp - 0x98], 1
jmp 0x10029951
and dword [ebp - 0x98], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp eax, dword [ebp - 0x98]
jl 0x1002996f
mov dword [ebp - 0xd4], 1
jmp 0x10029976
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xd4], eax
jle 0x1002998a
mov dword [ebp - 0x5c], 1
jmp 0x1002998e
and dword [ebp - 0x5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
sub eax, dword [ebp - 0x5c]
jne 0x100299b5
cmp dword [ebp - 0xa0], 0
jne 0x100299b5
cmp dword [ebp - 0x14], 0
jne 0x100299b5
and dword [ebp - 0xa4], 0
jmp 0x100299bf
mov dword [ebp - 0xa4], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xa4], eax
jg 0x100299d3
mov dword [ebp - 0x64], 1
jmp 0x100299d7
and dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x64], eax
jl 0x100299eb
mov dword [ebp - 0xac], 1
jmp 0x100299f2
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xac], eax
jg 0x10029a06
mov dword [ebp - 0x6c], 1
jmp 0x10029a0a
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x6c], eax
jg 0x10029a1e
mov dword [ebp - 0xb4], 1
jmp 0x10029a25
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xb4], eax
je 0x10029a39
mov dword [ebp - 0x74], 1
jmp 0x10029a3d
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
add eax, 3
je 0x10029a58
mov dword [ebp - 0xbc], 1
jmp 0x10029a5f
and dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 0x5659cde3
jle 0x10029a74
mov dword [ebp - 0x7c], 1
jmp 0x10029a78
and dword [ebp - 0x7c], 0
cmp dword [ebp - 0x7c], 2
jb 0x10029a8a
mov dword [ebp - 0xc4], 1
jmp 0x10029a91
and dword [ebp - 0xc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0xc4], eax
jne 0x10029ab2
cmp dword [ebp - 0x14], 0
jne 0x10029ab2
and dword [ebp - 0x84], 0
jmp 0x10029abc
mov dword [ebp - 0x84], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x84], eax
je 0x10029ad3
mov dword [ebp - 0xcc], 1
jmp 0x10029ada
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xcc], eax
jg 0x10029af4
mov dword [ebp - 0x8c], 1
jmp 0x10029afb
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
sub eax, 0x1fffa
cmp eax, dword [ebp - 0x1c]
jle 0x10029b17
mov dword [ebp - 0xd8], 1
jmp 0x10029b1e
and dword [ebp - 0xd8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0xd8], eax
jg 0x10029b3c
mov dword [ebp - 0xe0], 1
jmp 0x10029b43
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xe0], eax
jle 0x10029b57
mov dword [ebp - 0x54], 1
jmp 0x10029b5b
and dword [ebp - 0x54], 0
cmp dword [ebp - 0x54], 0x228d029b
je 0x10029b70
mov dword [ebp - 0xc0], 1
jmp 0x10029b77
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x48], eax
jmp 0x10029bb2
mov dword [ebp - 0x10c], 0xb407cb0b
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x48]
push eax
push 1
push 0x2bbb
push 0x2a06
lea eax, [ebp - 0x10c]
push eax
call fcn.100283c6
add esp, 0x18
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0xc], 0xe0648261
mov dword [ebp - 0x44], 0
jmp 0x10029be5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10029bfb
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x120], 0xfffffff6
jmp 0x10029bde
mov dword [ebp - 0xc], 0
jmp 0x10029c0b
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x17
jge 0x10029c2d
mov byte [ebp - 0x10], 0
movzx eax, byte [ebp - 0x10]
test eax, eax
je 0x10029c2b
push 0
push 0x7cf0
call fcn.1002a96d
pop ecx
pop ecx
jmp 0x10029c04
mov dword [ebp - 0xc], 0
jmp 0x10029c3d
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jg 0x10029d6f
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x30], 0
jmp 0x10029c5e
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x10029d6a
mov dword [ebp - 0x24], 0x5f5b1b6f
mov dword [ebp - 0x40], 0
jmp 0x10029c7f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10029c95
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x118], 0xfffffff7
jmp 0x10029c78
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x118], 0
jmp 0x10029cc3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x118]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x118], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x118], 0
jg 0x10029d28
mov dword [ebp - 0x38], 0xdf3d37a5
mov dword [ebp - 0x38], 0
jmp 0x10029cea
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x10029d26
mov dword [ebp - 0xf8], 0xc2e7ccc8
push 0x28d6
push 1
push 0x5a28
push 0x6384
push 0x2da8
push 0x76c4
lea eax, [ebp - 0xf8]
push eax
call fcn.10028432
add esp, 0x1c
jmp 0x10029ce3
jmp 0x10029ca8
mov dword [ebp - 0x24], 0
jmp 0x10029d38
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10029d65
mov byte [ebp - 0xd], 0
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x10029d63
push 0x40db
push 0x4b75
push 1
push 0x4b99
call fcn.100287c9
add esp, 0x10
jmp 0x10029d31
jmp 0x10029c57
jmp 0x10029c36
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
push 8
pop ecx
imul ecx, ecx, 5
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x2c], 0x25b9b55b
mov dword [ebp - 0x2c], 8
jmp 0x10029d9b
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffff2
jge 0x10029dd6
push 1
call fcn.100297d5
pop ecx
mov byte [ebp - 0xf], 0
push 0x5a0f
lea eax, [ebp - 0xf]
push eax
push 0x2f24
push 0x544a
push 0
push 0x5230
push 0x7d5e
call fcn.1002c01f
add esp, 0x1c
jmp 0x10029d94
mov eax, dword [ebp - 0x80]
cmp dword [eax + 4], 0
jbe 0x1002a133
mov dword [ebp - 0x9c], 0x1b0ae28d
mov dword [ebp - 0x94], 0x9413
mov dword [ebp - 0x70], 0x4177fd8b
mov dword [ebp - 8], 0
jmp 0x10029e0e
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x10029e21
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x50], 0xfffffff7
jmp 0x10029e07
mov dword [ebp - 8], 0
jmp 0x10029e31
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x10029e47
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x108], 4
jmp 0x10029e2a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x50], 0
jmp 0x10029e6c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x50], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x50], 0xfffffffa
jge 0x1002a070
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0xfffffff4
jmp 0x10029e94
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffe9
je 0x1002a06b
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x34], 0
jmp 0x10029eb8
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10029ece
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x150], 0xffffffff
jmp 0x10029eb1
cmp dword [ebp - 0xc8], 0
jne 0x1002a022
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0xc8], 0
jne 0x10029f09
cmp dword [ebp - 4], 0
jne 0x10029f09
cmp dword [ebp - 4], 0
jne 0x10029f09
and dword [ebp - 0xb0], 0
jmp 0x10029f13
mov dword [ebp - 0xb0], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xb0], eax
jg 0x10029f2a
mov dword [ebp - 0xdc], 1
jmp 0x10029f31
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0xdc], eax
jle 0x10029f4b
mov dword [ebp - 0xb8], 1
jmp 0x10029f52
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xb8]
jne 0x10029f6b
xor eax, eax
inc eax
jne 0x10029f6b
and dword [ebp - 0x90], 0
jmp 0x10029f75
mov dword [ebp - 0x90], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
imul eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 4]
jle 0x10029f97
mov dword [ebp - 0x104], 1
jmp 0x10029f9e
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 4]
cmp eax, 0x938d10fb
jae 0x10029fcd
mov dword [ebp - 0x58], 1
jmp 0x10029fd1
and dword [ebp - 0x58], 0
cmp dword [ebp - 0x58], 0xcef9
jge 0x10029fe8
xor eax, eax
inc eax
jne 0x10029fe8
and dword [ebp - 0xf4], 0
jmp 0x10029ff2
mov dword [ebp - 0xf4], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 0x60], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x60]
mov dword [ebp + eax - 0x108], ecx
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x60], eax
jne 0x1002a022
and dword [ebp - 0x68], 0
jmp 0x1002a029
mov dword [ebp - 0x68], 1
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jne 0x1002a052
mov dword [ebp - 0x78], 1
jmp 0x1002a056
and dword [ebp - 0x78], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x78]
mov dword [ebp + eax - 0x150], ecx
jmp 0x10029e8d
jmp 0x10029e57
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax]
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0x3c], 0
jmp 0x1002a091
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1002a0a7
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xe8], 0
jmp 0x1002a08a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe8], 0
jmp 0x1002a0d5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe8], 0xfffffff7
jl 0x1002a115
mov dword [ebp - 0x100], 8
push 1
lea eax, [ebp - 0x100]
push eax
call fcn.10029825
pop ecx
pop ecx
mov byte [ebp - 0xe], 0
movzx eax, byte [ebp - 0xe]
test eax, eax
je 0x1002a113
push 0
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
jmp 0x1002a0ba
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0xf0]
lea eax, [ebp - 0xfc]
push eax
push 0
call fcn.1002a8f0
add esp, 0x10
jmp 0x1002a13f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
mov esp, ebp
pop ebp
ret