Function at 0x1001096d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1006323c
push eax
mov dword fs:[0], esp
sub esp, 0x168
push ebx
push esi
push edi
mov edi, edx
test cl, cl
je 0x10010a84
cmp byte [ebp + 0x10], 0
je 0x100109c0
xor ebx, ebx
mov byte [esp + 0x2b], bl
cmp byte [esp + 0x2b], bl
je 0x100118ac
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_PolyPolygon]
jmp 0x100118ac
mov dword [esp + 0x18], 0x16c6
cmp dword [esp + 0x18], 0x1926
push 0
pop ebx
jle 0x10010a47
mov esi, ebx
mov dword [esp + 0x1c], ebx
mov edi, ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x34], edi
xor edi, esi
mov esi, ebx
mov eax, edi
lea ecx, [esp + 0xe0]
or eax, esi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10010a06
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [esp + 0xe8]
call fcn.1000d197
inc esi
cmp esi, 0x3e7d
jl 0x100109e9
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc edi
mov dword [esp + 0x20], edi
cmp edi, 0x5651
jl 0x100109e1
inc esi
mov dword [esp + 0x1c], esi
cmp esi, 0x4e48
jl 0x100109db
cmp dword [esp + 0x18], 0x14b4
jge 0x10010a5c
push str.dvwuftewj_luwq_tyosoh_cvp_gebiyidy_qesuanmga_gnxfucr_oiawj_jmq_bwbyy_gfdce_hlyftik_ixdrjgo
call fcn.1004d87c
pop ecx
mov edx, dword [ebp + 0x18]
mov dword [edx], ebx
cmp dword [edx], 2
jge 0x100118ac
mov esi, dword [ebp + 0x14]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [edx]
cmp dword [edx], 2
jl 0x10010a6d
jmp 0x100118ac
xor ebx, ebx
cmp byte [ebp + 0x20], bl
je 0x10011825
mov dword [esp + 0x10], ebx
jmp 0x10010aa5
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x4c], 0x4fd3df75
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x10010a95
mov dword [esp + 0x4c], 0x1b
jmp 0x10010ac9
mov byte [esp + 0x3e], bl
lea ecx, [esp + 0x3e]
push ebx
call fcn.1001043e
inc dword [esp + 0x50]
pop ecx
cmp dword [esp + 0x4c], 0x1d
jle 0x10010ab6
mov dword [esp + 0x1c], 0x745a
cmp dword [esp + 0x1c], 0x7661
jle 0x10010b3d
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetClipBox]
mov esi, ebx
mov dword [esp + 0x20], ebx
mov edi, ebx
mov ecx, edi
mov dword [esp + 0x34], esi
mov dword [esp + 0x24], ebx
sar esi, cl
mov ecx, ebx
mov eax, esi
sar eax, cl
mov ecx, 0x1007bbb8
cdq
push edx
push eax
call fcn.1000cbc0
inc ebx
cmp ebx, 0x21cc
jl 0x10010afe
mov esi, dword [esp + 0x20]
inc edi
push 0
pop ebx
cmp edi, 0x7aa8
jl 0x10010af2
inc esi
mov dword [esp + 0x20], esi
cmp esi, 0x702e
jl 0x10010af0
call dword [sym.imp.USER32.dll_EndMenu]
xor eax, eax
mov dword [esp + 0xac], 7
mov dword [esp + 0xa8], ebx
mov word [esp + 0x98], ax
mov dword [esp + 0x17c], ebx
cmp dword [esp + 0x1c], 0x7279
jge 0x10010b79
mov edx, str.dqkokld_scbwsqub_jgp_bylqbvkf_qofox_ipqy_pfp_pyhmejyhm_nylhybsl
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov dword [esp + 0x14], 0x68206240
mov dword [esp + 0x14], 0xfffffff7
jmp 0x10010b9f
push ecx
push ebx
push 0x3d1c
push ecx
call fcn.10012458
add esp, 0x10
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0x1d
jl 0x10010b8b
mov dword [esp + 0x14], ebx
jmp 0x10010bb7
xor cl, cl
call fcn.100107d1
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0xffffffef
jne 0x10010bac
push dword [ebp + 0xc]
lea ecx, [esp + 0x9c]
call fcn.1000cd9f
push 1
lea ecx, [esp + 0x7c]
call fcn.1000cdd8
xor eax, eax
lea ecx, [esp + 0x5c]
inc eax
mov byte [esp + 0x17c], al
mov dword [esp + 0x34], 0xffffffff
mov dword [esp + 0x10], 0xdd013d0b
mov dword [esp + 0x30], 0x1355fff
mov dword [esp + 0x14], 0x71a05132
mov dword [esp + 0x2c], 0xc9a130df
mov dword [esp + 0x24], eax
mov dword [esp + 0x38], 0xffffffff
mov dword [esp + 0x38], 4
mov dword [esp + 0x18], 0xffffffff
push eax
call fcn.1000cdd8
push 0x71f2
lea eax, [esp + 0x44]
mov byte [esp + 0x180], 2
push eax
push ecx
mov dword [esp + 0x2c], 0xb7dc
mov dl, 1
push ecx
mov dword [esp + 0x2c], 6
lea ecx, [esp + 0x88]
mov dword [esp + 0x2c], 0x66a4358b
call fcn.1000fe3a
add esp, 0x10
mov dword [esp + 0x40], ebx
jmp 0x10010c86
mov eax, dword [esp + 0x40]
mov dword [esp + eax*4 + 0x84], 0x74ca7790
inc dword [esp + 0x40]
cmp dword [esp + 0x40], 2
jl 0x10010c73
lea eax, [esp + 0x40]
push eax
push ecx
push 1
lea ecx, [esp + 0x68]
call fcn.1000ff31
mov eax, dword [esp + 0x40]
add esp, 0xc
inc dword [esp + 0x18]
xor ecx, ecx
mov eax, dword [esp + 0x24]
mov edx, 0xffff5bef
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x88], edx
mov esi, dword [eax]
mov eax, dword [esp + 0x5c]
cmp dword [eax], edx
setg cl
xor edx, edx
cmp ecx, esi
setne dl
xor eax, eax
cmp edx, esi
setg al
cmp eax, dword [esp + 0x20]
jge 0x10010cfd
cmp dword [esp + 0x10], ebx
je 0x10010cfd
xor ecx, ecx
inc ecx
jmp 0x10010cff
mov ecx, ebx
xor eax, eax
cmp ecx, 0xfffffffc
setge al
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x5c]
cmp dword [eax], ebx
jne 0x10010d27
mov dword [esp + 0x1c], ebx
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x5c]
cmp ecx, dword [eax]
jne 0x10010d27
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
xor ecx, ecx
mov eax, dword [esp + 0x5c]
mov edx, dword [eax]
mov eax, dword [esp + 0x30]
cmp edx, eax
mov eax, dword [esp + 0x78]
setg cl
cmp ecx, dword [eax]
jge 0x10010d4e
cmp dword [eax], 0
je 0x10010d4e
xor eax, eax
inc eax
jmp 0x10010d50
mov eax, ebx
lea ecx, [edx + 0x1f9d3f58]
xor edx, edx
add ecx, eax
mov eax, dword [esp + 0x2c]
cmp ecx, eax
mov eax, dword [esp + 0x84]
setge dl
xor ecx, ecx
sub edx, 0x7c80
cmp edx, eax
setge cl
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x5c]
call fcn.1000ce5b
lea ecx, [esp + 0x78]
mov byte [esp + 0x17c], bl
call fcn.1000ce5b
mov eax, dword [0x1007cc84]
test al, 1
jne 0x10010dc5
or eax, 1
mov dword [0x1007cc84], eax
push 0xbac3
mov byte [esp + 0x180], 3
call fcn.10024861
pop ecx
mov word [0x10081004], ax
mov byte [esp + 0x17c], bl
mov dword [esp + 0x10], 0x9b55bb2c
mov dword [esp + 0x10], 0x6a5b
cmp dword [esp + 0x10], 0x6d1c
jle 0x10010e5e
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_MaskBlt]
mov edi, ebx
mov dword [esp + 0x18], ebx
mov esi, ebx
mov dword [esp + 0x1c], ebx
mov eax, edi
mov ecx, ebx
cdq
idiv esi
mov dword [esp + 0x20], ecx
mov esi, edx
mov eax, esi
mov edi, 0x1ec2
cdq
idiv ecx
mov ebx, edx
mov eax, ebx
mov ecx, 0x1007bbb8
cdq
push edx
push eax
call fcn.1000cbc0
dec ebx
dec edi
jne 0x10010e16
mov ecx, dword [esp + 0x20]
inc ecx
mov dword [esp + 0x20], ecx
cmp ecx, 0x75e5
jl 0x10010e0a
mov esi, dword [esp + 0x1c]
inc esi
mov dword [esp + 0x1c], esi
push edi
mov edi, dword [esp + 0x1c]
pop ebx
cmp esi, 0x955
jl 0x10010dfd
inc edi
mov dword [esp + 0x18], edi
cmp edi, 0xbd6
jl 0x10010df7
cmp dword [esp + 0x10], 0x68eb
jge 0x10010e77
mov edx, str.epdwacl_lcmdskrvw_viupic_xiarnc_nbcp_tri_sdmvylpo_whdbai_hhay_qnsc_poxss_nbd
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov dword [esp + 0x10], ebx
jmp 0x10010e8d
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x6c], 0xfff8
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x10010e7d
mov dword [esp + 0x10], 0x1b
jmp 0x10010ea8
cmp dword [esp + 0x6c], ebx
jne 0x10010eaf
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xd
jle 0x10010e9e
mov dword [esp + 0x10], 0x10d2
cmp dword [esp + 0x10], 0x11db
jle 0x10010f32
mov edi, ebx
mov dword [esp + 0x1c], ebx
mov esi, ebx
mov dword [esp + 0x18], edi
mov ecx, esi
mov eax, ebx
shl edi, cl
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], edi
mov ecx, eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], ebx
sar edi, cl
mov eax, edi
mov ecx, 0x1007bbb8
xor eax, ebx
cdq
push edx
push eax
call fcn.1000cbc0
inc ebx
cmp ebx, 0x553b
jl 0x10010ee7
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x18]
inc eax
mov dword [esp + 0x20], eax
push 0
pop ebx
cmp eax, 0x6bab
jl 0x10010edb
mov edi, dword [esp + 0x1c]
inc esi
cmp esi, 0x4b5b
jl 0x10010ec9
inc edi
mov dword [esp + 0x1c], edi
cmp edi, 0x41b8
jl 0x10010ec7
mov eax, dword [0x1007cc84]
test al, 2
jne 0x10010f63
or eax, 2
mov dword [0x1007cc84], eax
push 0x7341
mov byte [esp + 0x180], 4
call fcn.10024861
pop ecx
mov word [0x10081008], ax
mov byte [esp + 0x17c], bl
cmp dword [esp + 0x10], 0xfef
jge 0x10010f7c
mov edx, str.jpadlevf_ccnamluw_ltnfx
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov dword [esp + 0x2c], 0xfb023ed1
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x30], ebx
mov dword [esp + 0x30], 0x8e1b8814
mov dword [esp + 0x30], 0xfffffff7
mov dword [esp + 0x30], 0x9b4e94f9
mov dword [esp + 0x30], 0xee28fdeb
mov dword [esp + 0x30], 1
mov dword [esp + 0x30], 9
mov dword [esp + 0x18], 0x426a
mov dword [esp + 0x20], 0x2de
cmp dword [esp + 0x20], 0x573
jle 0x10011025
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [esp + 0x110]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10010ffd
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [esp + 0x118]
call fcn.1000d197
inc edi
cmp edi, 0x1c0f
jl 0x10010fde
inc esi
cmp esi, 0xa49
jl 0x10010fdc
mov dword [esp + 0x10], ebx
jmp 0x1001103e
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xd4], 0x8f90a3cf
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1001102b
cmp dword [esp + 0x20], 0x32
jge 0x10011057
push str.iuos_cluywmvg_afamc_rkkcr_dmfviik_hlfxbuu_moqe_nrtofs
call fcn.1004d87c
pop ecx
inc dword [esp + 0x18]
mov esi, 0x5f88
mov dword [esp + 0xd4], esi
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x18]
sub ecx, 0xe05d
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setne dl
sub edx, esi
neg edx
sbb edx, edx
inc edx
mov dword [esp + 0x30], edx
mov byte [esp + 0x2b], bl
cmp byte [esp + 0x2b], 0
je 0x100110a9
push ecx
push ecx
push 0x4b81
push ecx
push 1
call fcn.1000ffd4
add esp, 0x14
cmp dword [ebp + 0xc], 0
mov dword [esp + 0x34], ebx
jbe 0x10011784
mov dword [esp + 0x1c], 0x3f46
cmp dword [esp + 0x1c], 0x3fdd
jle 0x1001111c
mov esi, ebx
mov dword [esp + 0x20], ebx
mov edi, esi
mov esi, 0x3ea5
mov eax, edi
lea ecx, [esp + 0x140]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100110f1
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [esp + 0x148]
call fcn.1000d197
dec edi
dec esi
jne 0x100110d6
mov esi, dword [esp + 0x20]
inc esi
mov dword [esp + 0x20], esi
cmp esi, 0x5dca
jl 0x100110cf
mov dword [esp + 0x20], 0xfffffffb
cmp dword [esp + 0x1c], 0x3ecc
jge 0x10011139
push str.ilwb_yhptsi_libqfs_ftabeq_giahn_kcouxjvdb_ifgy_kudhqf_ghjj_ttxw_xnhsu_xmi
call fcn.1004d87c
pop ecx
mov dword [esp + 0x10], 0x18101bc
mov dword [esp + 0x14], ebx
jmp 0x10011157
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x44], 0xe8cff0ea
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 2
jl 0x10011147
mov dword [esp + 0x44], ebx
jmp 0x100114c6
mov dword [esp + 0x14], 1
mov ecx, 0x47a5
mov dword [esp + 0x18], 0x4a6b2c4e
mov dword [esp + 0x24], 0xfffffff9
push 1
call fcn.1001043e
pop ecx
cmp dword [esp + 0x14], ebx
je 0x100111a9
mov dword [esp + 0x2c], 1
cmp dword [esp + 0x2c], ebx
jne 0x100114d1
jmp 0x100114c2
mov dword [esp + 0x38], 4
mov dword [esp + 0x1c], 0x71d6
cmp dword [esp + 0x1c], 0x7268
jle 0x100111fb
mov edi, ebx
mov esi, ebx
mov dword [esp + 0x2c], ebx
lea eax, [ebx + esi]
mov ecx, 0x1007bbb8
add eax, edi
cdq
push edx
push eax
call fcn.1000cbc0
inc ebx
cmp ebx, 0x48a
jl 0x100111cb
inc esi
push 0
pop ebx
cmp esi, 0x56de
jl 0x100111c7
inc edi
cmp edi, 0x6b8d
jl 0x100111c5
push 3
lea ecx, [esp + 0xb4]
call fcn.1000cdd8
mov byte [esp + 0x17c], 5
cmp dword [esp + 0x1c], 0x702e
jge 0x1001122a
mov edx, str.styxdonm_xojcq_tjtct_usjtnlyd_xomblgq_xrceihpiy
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov dword [esp + 0x1c], 0x108d
cmp dword [esp + 0x1c], 0x10eb
jle 0x100112a0
mov edx, ebx
mov dword [esp + 0x14], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [esp + 0xf8]
and eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10011267
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [esp + 0x100]
call fcn.1000d197
mov edx, dword [esp + 0x14]
inc esi
cmp esi, 0xb4c
jl 0x10011246
inc edi
cmp edi, 0x278
jl 0x10011244
inc edx
mov dword [esp + 0x14], edx
cmp edx, 0x7211
jl 0x10011242
lea eax, [esp + 0xd0]
mov edx, 0x5b51
push eax
push ecx
push ebx
push ecx
lea eax, [esp + 0xc0]
mov ecx, 0x4d4
push eax
call fcn.10010481
add esp, 0x14
cmp dword [esp + 0x1c], 0xd86
jge 0x100112da
push str.kasug_ydxyt_pncvayaip_lqpdx_iryoedsx_xynxapktj_fud
call fcn.1004d87c
pop ecx
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x14], 0x18
jne 0x100114af
mov esi, dword [esp + 0xb0]
mov dword [esp + 0x2c], esi
xor ecx, ecx
mov dword [esp + 0x1c], 9
mov eax, dword [esp + 0x1c]
test eax, eax
mov eax, dword [esp + 0x38]
setns cl
cmp ecx, 0xfffb
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [esp + 0x14]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x18]
mov dword [esi + 4], eax
test eax, eax
je 0x10011341
cmp dword [esp + 0x20], ebx
je 0x10011341
xor eax, eax
inc eax
jmp 0x10011343
mov eax, ebx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x44], ebx
je 0x1001138a
push ebx
push 1
push 0xbab
push 0x3596
push 1
push 0x6da8
lea eax, [esp + 0x55]
mov byte [esp + 0x55], bl
push eax
push 0x65da
mov edx, 0x5cf5
mov ecx, 0x1a8f
call fcn.1004946b
add esp, 0x20
jmp 0x100114a0
mov dword [esp + 0x10], ebx
jmp 0x100113a0
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x58], 0xfffffffc
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x10011390
mov eax, dword [esp + 0x58]
xor edx, edx
mov eax, dword [esp + 0x44]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
cmp eax, ecx
mov eax, dword [esp + 0x18]
setge dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [esp + 0x58]
setl bl
xor ecx, ecx
cmp ebx, eax
setne cl
imul eax, ecx, 0x9898
test eax, eax
jne 0x100113ea
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
xor ebx, ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x24], 0x147e
cmp dword [esp + 0x24], 0x15bf
jle 0x10011476
mov edx, ebx
mov dword [esp + 0x18], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [esp + 0x128]
xor eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10011431
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [esp + 0x130]
call fcn.1000d197
mov edx, dword [esp + 0x18]
inc esi
cmp esi, 0x23bb
jl 0x10011410
inc edi
cmp edi, 0x4145
jl 0x1001140e
inc edx
mov dword [esp + 0x18], edx
cmp edx, 0x79dd
jl 0x1001140c
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov esi, dword [esp + 0x2c]
mov byte [esp + 0x3f], bl
cmp dword [esp + 0x24], 0x12c9
jge 0x1001148f
push str.hamgr_xkxmfyiw_dsrqpybv_ibjm_bqcr_oimuuu_vwd_jsah_fxvfhlv_qcof
call fcn.1004d87c
pop ecx
push ecx
push 1
lea eax, [esp + 0x47]
push eax
push ecx
call fcn.10012458
add esp, 0x10
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0x18
je 0x100112f4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x17c], bl
call fcn.1000ce5b
inc dword [esp + 0x44]
cmp dword [esp + 0x44], 3
jle 0x10011167
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], ebx
jne 0x10011501
mov eax, dword [esp + 0x48]
cmp dword [esp + 0x44], ebx
jne 0x10011501
cmp dword [esp + 0x10], ebx
jne 0x10011501
cmp dword [esp + 0x48], ebx
jne 0x10011501
mov edx, ebx
jmp 0x10011504
xor edx, edx
inc edx
mov eax, dword [esp + 0x48]
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x20]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0x3c53d173
setne al
sub eax, 0xf302d78b
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x48], eax
call fcn.1000fe14
push 0x34
xor edx, edx
mov dword [esp + 0x54], 0x9841b3c6
pop ecx
div ecx
mov dword [esp + 0x24], 0x2797
cmp dword [esp + 0x24], 0x27f6
mov dword [esp + 0x30], edx
jle 0x100115d8
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, ebx
mov dword [esp + 0x18], ebx
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
or eax, ecx
lea ecx, [esp + 0x158]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001159f
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [esp + 0x160]
call fcn.1000d197
mov ecx, dword [esp + 0x18]
inc esi
cmp esi, 0x3075
jl 0x10011581
inc edi
cmp edi, 0x4d95
jl 0x1001157f
inc ecx
mov dword [esp + 0x18], ecx
cmp ecx, 0x9a8
jl 0x1001157d
mov dword [esp + 0xcc], 5
cmp dword [esp + 0x24], 0x23e5
jge 0x100115f8
push str.knkwvlpc_yrx_cxjinnunn_soxjppsp_gtget_hjdqdnie_dqjgrcm_tnpdvns_abq_ahwqp_pmuis_gth_qmlpwj_qutsop
call fcn.1004d87c
pop ecx
mov dword [esp + 0xbc], 1
mov dword [esp + 0x50], ebx
jmp 0x10011733
push 3
lea ecx, [esp + 0xc4]
call fcn.1000cdd8
mov byte [esp + 0x17c], 6
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x18], 0x27da
cmp dword [esp + 0x18], 0x28c9
jle 0x100116a9
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x38], 0x3d7f
mov edi, dword [esp + 0x20]
mov esi, ebx
mov edx, edi
mov ecx, esi
mov eax, ebx
sar edx, cl
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], edx
and eax, edx
mov ecx, 0x1007bbb8
cdq
push edx
push eax
call fcn.1000cbc0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
inc eax
mov dword [esp + 0x24], eax
cmp eax, 0x4e74
jl 0x10011662
inc esi
cmp esi, 0x3d6f
jl 0x10011652
mov edi, dword [esp + 0x1c]
add dword [esp + 0x20], edi
dec dword [esp + 0x38]
jne 0x1001164c
inc edi
mov dword [esp + 0x1c], edi
cmp edi, 0x7493
jl 0x10011640
mov dword [esp + 0x54], 7
cmp dword [esp + 0x18], 0x2412
jge 0x100116ca
mov edx, str.bfjphv_vypc_wim_cbwqju_gvxluv_hoaorhb_sbnnrmra
mov ecx, 0x1007bbb8
call fcn.1000ee07
push 0x1e1a
push ecx
push 1
push ecx
mov dword [esp + 0x78], ebx
lea edx, [esp + 0xd0]
push 0x1279
lea ecx, [esp + 0x88]
call fcn.10010481
add esp, 0x14
lea eax, [esp + 0x70]
push 0x222c
push 1
push 0xa76
sub esp, 0x10
push eax
push ecx
lea eax, [esp + 0x8c]
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.100100b1
add esp, 0x2c
mov byte [esp + 0x17c], bl
lea ecx, [esp + 0xc0]
call fcn.1000ce5b
dec dword [esp + 0x50]
cmp dword [esp + 0x50], 0xffffffe8
jne 0x1001160c
push ecx
call fcn.10011b3f
mov eax, dword [esp + 0x34]
pop ecx
push 0x1a
pop esi
cmp eax, esi
jge 0x10011759
movzx edx, word [0x10081004]
jmp 0x10011763
cdq
idiv esi
movzx eax, word [0x10081008]
add edx, eax
lea ecx, [esp + 0x98]
push edx
call fcn.1000cd5d
mov eax, dword [esp + 0x34]
inc eax
mov dword [esp + 0x34], eax
cmp eax, dword [ebp + 0xc]
jb 0x100110b7
mov ecx, dword [ebp + 8]
lea eax, [esp + 0x98]
cmp ecx, eax
je 0x1001179b
push 0xffffffffffffffff
push ebx
push eax
call fcn.1000d1db
mov dword [esp + 0x2c], 0x1f50
cmp dword [esp + 0x2c], 0x21e2
jle 0x10011811
mov esi, ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], esi
mov dword [esp + 0x34], 0x78d0
mov edi, ebx
mov ebx, dword [esp + 0x20]
lea eax, [ebx + edi]
mov esi, 0x3c64
mov dword [esp + 0x54], eax
mov ebx, eax
mov eax, ebx
mov ecx, 0x1007bbb8
cdq
push edx
push eax
call fcn.1000cbc0
inc ebx
dec esi
jne 0x100117d3
mov ebx, dword [esp + 0x20]
inc edi
cmp edi, 0x3b8
jl 0x100117c5
dec ebx
dec dword [esp + 0x34]
push esi
mov dword [esp + 0x24], ebx
pop ebx
jne 0x100117bf
mov esi, dword [esp + 0x24]
inc esi
mov dword [esp + 0x24], esi
cmp esi, 0x699c
jl 0x100117b3
push ebx
push 1
lea ecx, [esp + 0xa0]
call fcn.1000d3a5
jmp 0x100118ac
mov esi, dword [ebp + 0x24]
mov dword [esi], ebx
jmp 0x1001189f
push 2
lea ecx, [esp + 0x90]
call fcn.1000cdd8
mov dword [esp + 0x17c], 7
mov dword [esp + 0x10], ebx
jmp 0x10011861
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x8c]
mov dword [eax + ecx*4], 0xc2443ac4
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x1001184b
lea eax, [esp + 0x8c]
push eax
push dword [ebp + 0x1c]
push ecx
push edi
call fcn.100122dd
pop ecx
pop ecx
push ebx
push ecx
push dword [ebp + 0x28]
call fcn.10049698
or dword [esp + 0x190], 0xffffffff
lea ecx, [esp + 0xa0]
add esp, 0x14
call fcn.1000ce5b
inc dword [esi]
cmp dword [esi], 1
jle 0x1001182c
mov dword [esp + 0x74], 0x1007b5ec
mov ecx, dword [esp + 0x174]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret