Function at 0x100030d0
Capabilities:
Contain obfuscated stackstrings
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4f0
mov eax, dword [0x10029034]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
mov dword [0x10029a0c], eax
mov eax, dword [ebp + 0x10]
push ebx
mov dword [0x10029a10], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [0x10029a14], eax
lea eax, [ebp - 0x28]
push edi
push eax
lea eax, [ebp - 0xc]
mov word [ebp - 7], 0x30
push eax
mov dword [ebp - 0xc], 0x37323323
mov byte [ebp - 8], 0x37
mov dword [ebp - 0x1c], 0x6f7250
mov dword [ebp - 0x20], 0x65746172
mov word [ebp - 0x26], 0x6341
mov word [ebp - 0x23], 0x6c65
mov word [ebp - 0x28], 0x4350
mov byte [ebp - 0x24], 0x63
mov byte [ebp - 0x21], 0x65
call fcn.10006ed0
mov edi, eax
add esp, 8
test edi, edi
je 0x10003436
lea eax, [ebp - 0x4cc]
mov dword [ebp - 0x4cc], 0
push eax
push edi
call fcn.100064d0
lea eax, [ebp - 0x3c]
mov word [ebp - 0x37], 0x6465
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x32], 0x6970706f
push eax
push 0
push 0
mov word [ebp - 0x34], 0x6853
mov dword [ebp - 0x3c], 0x75636553
mov word [ebp - 0x2d], 0x67
mov byte [ebp - 0x38], 0x72
mov byte [ebp - 0x2e], 0x6e
mov byte [ebp - 0x35], 0x20
call fcn.10006bf0
mov esi, eax
add esp, 0x18
test esi, esi
je 0x10003436
lea eax, [ebp - 0x4d4]
mov dword [ebp - 0x4d4], 0
push eax
push esi
call fcn.100064d0
mov eax, dword [ebp - 0x4cc]
add esp, 8
cmp eax, dword [ebp - 0x4d4]
jne 0x10003436
mov ebx, dword [sym.imp.USER32.dll_IsWindowVisible]
push esi
call ebx
test eax, eax
je 0x10003436
push edi
call ebx
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
test eax, eax
setne byte [ebp - 0x4ed]
test eax, eax
je 0x1000320a
push 0
push edi
call ebx
push 6
push esi
call ebx
push 0x40
lea eax, [ebp - 0x18]
mov dword [ebp - 0xaf], 0x74617265
push eax
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xa8], 0x69206f72
push eax
push 0
mov dword [ebp - 0x90], 0x736e6920
mov word [ebp - 0x50], 0x656e
mov word [ebp - 0xb5], 0x4120
mov dword [ebp - 0x9f], 0x2c64656c
mov dword [ebp - 0x6e], 0x72702065
mov word [ebp - 0x68], 0x6465
mov word [ebp - 0x5d], 0x5420
mov word [ebp - 0x7e], 0x6361
mov dword [ebp - 0x57], 0x20736920
mov dword [ebp - 0x75], 0x6e6f206e
mov word [ebp - 0xaa], 0x5020
mov dword [ebp - 0x63], 0x67617020
mov byte [ebp - 0x87], 0x69
mov word [ebp - 0x7b], 0x7669
mov word [ebp - 0xc8], 0x6f59
mov word [ebp - 0x53], 0x6f6e
mov byte [ebp - 0x7c], 0x74
mov byte [ebp - 0xc1], 0x65
mov dword [ebp - 0xc5], 0x726c6120
mov word [ebp - 0x8c], 0x7274
mov word [ebp - 0x95], 0x2065
mov word [ebp - 0x5a], 0x7265
mov dword [ebp - 0xbe], 0x61682079
mov byte [ebp - 0x58], 0x65
mov dword [ebp - 0x42], 0x2e6c6c61
mov dword [ebp - 0x48], 0x6e696572
mov word [ebp - 0x5f], 0x2e65
mov dword [ebp - 0x86], 0x20736e6f
mov dword [ebp - 0x99], 0x7361656c
mov word [ebp - 0x4a], 0x206f
mov dword [ebp - 0xa4], 0x6174736e
mov byte [ebp - 0x51], 0x20
mov dword [ebp - 0xb9], 0x43502065
mov byte [ebp - 0x66], 0x69
mov byte [ebp - 0xa0], 0x6c
mov dword [ebp - 0xb3], 0x6c656363
mov word [ebp - 0x4d], 0x2064
mov word [ebp - 0x92], 0x6565
mov word [ebp - 0x89], 0x7463
mov word [ebp - 0x70], 0x6874
mov byte [ebp - 0x71], 0x20
mov byte [ebp - 0x4e], 0x65
mov word [ebp - 0x9b], 0x7020
mov dword [ebp - 0x79], 0x6f697461
mov dword [ebp - 0x82], 0x20726f66
mov word [ebp - 0x65], 0x676e
mov word [ebp - 0x6a], 0x6365
mov byte [ebp - 0xba], 0x76
mov byte [ebp - 0x3e], 0
mov byte [ebp - 0x8a], 0x75
mov byte [ebp - 0x5b], 0x68
mov byte [ebp - 0xab], 0x65
mov word [ebp - 0xc0], 0x6461
mov word [ebp - 0x44], 0x7473
mov byte [ebp - 0x4b], 0x74
mov byte [ebp - 0x93], 0x73
mov byte [ebp - 0xc6], 0x75
mov dword [ebp - 0x10], 0x6e6f69
mov dword [ebp - 0x18], 0x6f666e49
mov dword [ebp - 0x14], 0x74616d72
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp byte [ebp - 0x4ed], 0
je 0x100033f1
push 1
push edi
call ebx
push 1
push esi
call ebx
lea ecx, [ebp - 0x4cc]
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4dc], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4d8], 0xf
mov dword [ebp - 0x4cc], 0x736579
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10003427
lea eax, [ebp - 0x4cc]
jmp 0x1000347d
lea ecx, [ebp - 0x4cc]
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4dc], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4d8], 0xf
mov word [ebp - 0x4cb], 0x6f
mov byte [ebp - 0x4cc], 0x6e
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10003470
lea eax, [ebp - 0x4cc]
sub ecx, edx
push ecx
push eax
lea ecx, [ebp - 0x4ec]
call fcn.100054e0
push 0x400
lea eax, [ebp - 0x4c8]
push 0
push eax
call fcn.1000b850
cmp dword [ebp - 0x4d8], 0x10
lea eax, [ebp - 0x4ec]
mov word [ebp - 0x4cf], 0x73
cmovae eax, dword [ebp - 0x4ec]
push eax
lea eax, [ebp - 0x4d0]
mov byte [ebp - 0x4d0], 0x25
push eax
lea eax, [ebp - 0x4c8]
push 0x400
push eax
call fcn.10005680
lea eax, [ebp - 0x4c8]
push eax
call fcn.10001580
add esp, 0x20
lea ecx, [ebp - 0x4ec]
call fcn.10004190
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000a1d4
mov esp, ebp
pop ebp
ret