Function at 0xe81c89
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0xf15036
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0xf387a0]
xor eax, esp
mov dword [esp + 0x250], eax
push ebx
push esi
push edi
mov eax, dword [0xf387a0]
xor eax, esp
push eax
lea eax, [esp + 0x268]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea eax, [esi - 0x2711]
mov ebx, ecx
cmp eax, 0xf
ja case.0xe81ab4.10007
jmp dword [eax*4 + 0xe8206c]
mov eax, dword [ebx + 0x24]
push esi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
jmp case.0xe81ab4.10007
add dword [ebx + 0x28], 0x12c
cmp dword [ebx + 0x28], 0x5dc
jl 0xe81b49
mov ecx, dword [ebx + 0x24]
push esi
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [ebx + 0x70]
sub edx, dword [ebx + 0x6c]
xor edi, edi
sar edx, 2
test edx, edx
jbe 0xe81b2b
lea ecx, [ecx]
mov eax, dword [ebx + 0x70]
sub eax, dword [ebx + 0x6c]
sar eax, 2
cmp edi, eax
jb 0xe81b12
call fcn.00ebb554
mov ecx, dword [ebx + 0x6c]
mov esi, dword [ecx + edi*4]
call fcn.00e54a20
mov edx, dword [ebx + 0x70]
sub edx, dword [ebx + 0x6c]
inc edi
sar edx, 2
cmp edi, edx
jb 0xe81b00
mov edi, ebx
mov dword [ebx + 0x28], 0
call fcn.00e831a0
mov eax, dword [ebx + 0x3c]
push 0
push eax
push 0x2713
jmp 0xe82039
mov ecx, dword [ebx + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1c]
call eax
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_SetFocus]
push 0x14007b
push 0xfed40000
push 0x20a
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
call dword [sym.imp.USER32.dll_UpdateWindow]
jmp case.0xe81ab4.10007
mov ecx, dword [ebx + 0x24]
push esi
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.00e834b0
test al, al
je case.0xe81ab4.10007
mov edi, ebx
call fcn.00e836d0
mov edx, dword [ebx + 0x24]
push 0
push 0x2710
push 0x271d
push edx
jmp 0xe8203d
mov eax, dword [ebx + 0x24]
push esi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
call fcn.00e76970
cmp byte [eax + 0xac], 0
jne 0xe81c0b
call fcn.00e54920
test al, al
je 0xe81beb
call fcn.00e54630
cmp eax, 0x40
jae 0xe81c0b
mov ecx, dword [ebx + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push str.document.getElementById_video_.play___
call eax
push 0
push 0x2710
push 0x271f
jmp 0xe82039
mov edx, dword [ebx + 0x24]
xor esi, esi
push esi
push 0xe83980
push edx
call dword [sym.imp.USER32.dll_EnumChildWindows]
cmp dword [0xf3b834], 2
jl 0xe81c47
mov edi, ebx
mov dword [0xf3b834], esi
call fcn.00e836d0
mov eax, dword [ebx + 0x24]
push esi
push 0xbb8
push 0x271d
push eax
jmp 0xe8203d
mov eax, dword [0xf3b838]
cmp eax, esi
je case.0xe81ab4.10007
inc dword [0xf3b834]
push 0x12c00dc
push eax
push 0x7b
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [ebx + 0x24]
push esi
push 0x7d0
push 0x2720
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0xf3b838], esi
jmp case.0xe81ab4.10007
mov edx, dword [ebx + 0x24]
push esi
push edx
call dword [sym.imp.USER32.dll_KillTimer]
push 0
push str.32768
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
push 0
test esi, esi
je 0xe81d53
push 0
push 0x1e1
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
push edi
call dword [sym.imp.USER32.dll_GetMenuItemCount]
push 0
push edi
mov dword [esp + 0x1c], eax
call dword [sym.imp.USER32.dll_GetMenuItemID]
cmp dword [esp + 0x14], 0xa
mov dword [esp + 0x18], eax
je 0xe81cf6
push 0
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0x7d0
push 0x271f
jmp 0xe82039
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x5e]
push eax
mov word [esp + 0x60], dx
call fcn.00ec1460
mov edx, dword [esp + 0x24]
add esp, 0xc
push 0
push 0x104
lea ecx, [esp + 0x5c]
push ecx
push edx
push edi
call dword [sym.imp.USER32.dll_GetMenuStringW]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0xe81d51
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
push 0
push 0x28
push 0x100
push esi
call edi
push 0
push 0xd
push 0x100
push esi
call edi
push 0
mov eax, dword [ebx + 0x24]
push 0x7d0
push 0x271f
push eax
jmp 0xe8203d
mov ecx, dword [ebx + 0x24]
push esi
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.00e83230
test al, al
je case.0xe81ab4.10007
mov ecx, dword [ebx + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push str.document.getElementsByClassName_x_console_out__0_.setAttribute_style_display:block___
call eax
mov eax, ebx
call fcn.00e833c0
mov eax, ebx
call fcn.00e833c0
push 0
push 0x1388
push 0x271c
jmp 0xe82039
mov edx, dword [ebx + 0x24]
push esi
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.00e83230
test al, al
je case.0xe81ab4.10007
mov eax, ebx
call fcn.00e83430
mov eax, dword [ebx + 0x24]
push 0
push 0x2710
push 0x271b
push eax
jmp 0xe8203d
mov ecx, dword [ebx + 0x24]
push esi
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.00e834b0
test al, al
je case.0xe81ab4.10007
mov edx, dword [0xf3a510]
mov ecx, ebx
mov dword [0xf3a514], edx
call fcn.00e837b0
mov dword [0xf3a510], eax
cmp eax, dword [0xf3a514]
jne 0xe81e5c
mov edi, ebx
call fcn.00e836d0
push 0
push 0x7d0
push 0x271f
jmp 0xe82039
mov edx, dword [ebx + 0x24]
push esi
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.00e834b0
test al, al
je case.0xe81ab4.10007
mov edi, ebx
call fcn.00e836d0
call fcn.00e836d0
mov eax, dword [ebx + 0x24]
push 0
push 0x1388
push 0x271d
push eax
jmp 0xe8203d
mov ecx, dword [ebx + 0x24]
push esi
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [ebx + 0x24]
push 0
push 0x3e8
push 0x2714
push edx
jmp 0xe8203d
push ebx
call fcn.00e82470
test al, al
jne case.0xe81ab4.10007
mov eax, dword [ebx + 0x24]
push esi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [ebx + 0x24]
push 0
push 0
push 0x10
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp case.0xe81ab4.10007
mov edx, dword [ebx + 0x24]
push esi
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov edi, dword [ebx + 0x38]
cmp edi, 0xffffffff
jle case.0xe81ab4.10007
mov eax, dword [ebx + 0x70]
sub eax, dword [ebx + 0x6c]
lea esi, [ebx + 0x60]
sar eax, 2
cmp edi, eax
jge case.0xe81ab4.10007
call fcn.00e88fe0
mov edi, dword [eax]
mov eax, dword [edi + 0x5c]
cmp dword [eax + 0x10], 1
jne 0xe81f7f
lea esi, [esp + 0x38]
mov eax, edi
call fcn.00e83f60
mov dword [esp + 0x270], 0
mov ecx, dword [edi + 0x38]
mov edx, dword [ecx]
mov eax, dword [edx + 0x50]
call eax
push eax
lea ecx, [esp + 0x20]
call fcn.00e528e0
mov byte [esp + 0x270], 1
cmp dword [edi + 0x58], 0
jg 0xe81f4f
mov ecx, dword [edi + 0x5c]
mov edx, dword [0xf3a518]
cmp edx, dword [ecx + 0x88]
jge 0xe81f4f
inc dword [0xf3a518]
jmp 0xe81f61
push edi
mov edi, ebx
mov dword [0xf3a518], 1
call fcn.00e82e90
lea ecx, [esp + 0x1c]
call fcn.00e57520
lea ecx, [esp + 0x38]
call fcn.00e57520
mov dword [ebx + 0x38], 0xffffffff
jmp case.0xe81ab4.10007
push edi
mov edi, ebx
call fcn.00e82e90
mov dword [ebx + 0x38], 0xffffffff
jmp case.0xe81ab4.10007
mov eax, dword [ebx + 0x28]
cmp eax, dword [ebx + 0x2c]
jg 0xe82009
mov ecx, dword [ebx + 0x30]
test ecx, ecx
jne 0xe81faf
add eax, 0x3e8
mov dword [ebx + 0x28], eax
jmp case.0xe81ab4.10007
cmp ecx, 1
jne 0xe81fde
mov ecx, dword [ebx + 4]
add eax, 0x10e
push 0x640064
mov dword [ebx + 0x28], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x1c]
push 0xfef20000
push 0x20a
call edx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0xe81ab4.10007
cmp ecx, 2
jne case.0xe81ab4.10007
add eax, 0x1f4
mov dword [ebx + 0x28], eax
mov eax, 0x12c
mov edx, eax
mov esi, 0xc8
push esi
push edx
mov ecx, 0x2bc
push ecx
push eax
mov eax, ebx
call fcn.00e81920
jmp case.0xe81ab4.10007
mov eax, dword [ebx + 0x24]
push esi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push str.AD418965_BA62_4742_83D1_650C23B92721
push 0
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0
push 0x3e8
push 0x2715
mov ecx, dword [ebx + 0x24]
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
xor eax, eax
mov ecx, dword [esp + 0x268]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x250]
xor ecx, esp
call fcn.00eb9637
mov esp, ebp
pop ebp
ret 8