Function at 0x5ae270
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x67bfe1
mov eax, dword fs:[0]
push eax
sub esp, 0x15c
mov eax, dword [0x71d5e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esi + 0x574]
mov dword [ebp - 0x128], esi
mov ebx, 0xff
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x10c], 0xb4c6eafc
mov dword [ebp - 0x108], 0xfcc6b4b4
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x100], 0xeaffffff
mov dword [ebp - 0xfc], 0xc6eaeaea
mov dword [ebp - 0xf8], 0x7e7e90b4
mov dword [ebp - 0xf4], 0xffffffc6
mov dword [ebp - 0xf0], 0xfceaffff
mov dword [ebp - 0xec], 0xc6eaeafc
mov dword [ebp - 0xe8], 0x6c7e90b4
mov dword [ebp - 0xe4], 0xffff905a
mov dword [ebp - 0xe0], 0xfcfceaff
mov dword [ebp - 0xdc], 0xc6eaeafc
mov dword [ebp - 0xd8], 0x6c7e90b4
mov dword [ebp - 0xd4], 0xff7e365a
mov dword [ebp - 0xd0], 0xfcfcfcea
mov dword [ebp - 0xcc], 0xc6eaeafc
mov dword [ebp - 0xc8], 0x6c7e90b4
mov dword [ebp - 0xc4], 0xea24365a
mov dword [ebp - 0xc0], 0xfcfcfcea
mov dword [ebp - 0xbc], 0xc6eaeafc
mov dword [ebp - 0xb8], 0x6c7e90b4
mov dword [ebp - 0xb4], 0x5a243648
mov dword [ebp - 0xb0], 0xeaeaeaea
mov dword [ebp - 0xac], 0xb4c6eaea
mov dword [ebp - 0xa8], 0x6c7e9090
mov dword [ebp - 0xa4], 0x24122448
mov dword [ebp - 0xa0], 0xeaeaeac6
mov dword [ebp - 0x9c], 0xb4c6c6c6
mov dword [ebp - 0x98], 0x487e7e90
mov dword [ebp - 0x94], 0x12122436
mov dword [ebp - 0x90], 0xc6c6c6c6
mov dword [ebp - 0x8c], 0x90b4b4c6
mov dword [ebp - 0x88], 0x486c7e7e
mov dword [ebp - 0x84], 0x121236
mov dword [ebp - 0x80], 0xb4b4b4c6
mov dword [ebp - 0x7c], 0x7e90b4b4
mov dword [ebp - 0x78], 0x365a6c7e
mov dword [ebp - 0x74], 0x1224
mov dword [ebp - 0x70], 0x909090c6
mov dword [ebp - 0x6c], 0x7e7e9090
mov dword [ebp - 0x68], 0x36486c6c
mov dword [ebp - 0x64], 0x36001224
mov dword [ebp - 0x60], 0x7e7e90fc
mov dword [ebp - 0x5c], 0x6c6c7e7e
mov dword [ebp - 0x58], 0x24365a5a
mov dword [ebp - 0x54], 0xb4000012
mov dword [ebp - 0x50], 0x6c6cc6ff
mov dword [ebp - 0x4c], 0x5a5a6c6c
mov dword [ebp - 0x48], 0x2436485a
mov dword [ebp - 0x44], 0xff480012
mov dword [ebp - 0x40], 0x6cb4ffff
mov dword [ebp - 0x3c], 0x485a5a5a
mov dword [ebp - 0x38], 0x12243648
mov dword [ebp - 0x34], 0xffff3600
mov dword [ebp - 0x30], 0xc6ffffff
mov dword [ebp - 0x2c], 0x4848485a
mov dword [ebp - 0x28], 0x12242436
mov dword [ebp - 0x24], 0xffffff6c
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x1c], 0x486cb4fc
mov dword [ebp - 0x18], 0xea7e5a36
mov dword [ebp - 0x14], 0xffffffff
call fcn.00411b87
mov eax, dword [esi + 0x4cc]
cmp eax, 0xffffffff
jne 0x5ae4f3
mov eax, dword [esi + 0x4c8]
mov dword [ebp - 0x118], eax
mov eax, dword [esi + 0x4d8]
cmp eax, 0xffffffff
jne 0x5ae512
mov ecx, dword [esi + 0x4d4]
mov dword [ebp - 0x114], ecx
jmp 0x5ae518
mov dword [ebp - 0x114], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.0040cf29
push eax
lea ecx, [ebp - 0x168]
call fcn.004143ab
xor esi, esi
lea ecx, [ebp - 0x154]
mov dword [ebp - 4], esi
call fcn.00413b77
mov edx, dword [ebp - 0x164]
push edx
mov byte [ebp - 4], 1
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [ebp - 0x154]
call fcn.00414282
mov dword [ebp - 0x120], esi
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
mov eax, dword [ebp - 0x164]
push 0x10
push 0x10
push eax
mov byte [ebp - 4], 2
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
lea ecx, [ebp - 0x124]
call fcn.00414556
mov ecx, dword [ebp - 0x120]
mov edx, dword [ebp - 0x150]
push ecx
push edx
call fcn.004145e7
mov ecx, dword [ebp - 0x118]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x114]
movzx edi, al
movzx edx, cl
mov dword [ebp - 0x11c], esi
mov esi, edi
sub esi, edx
mov dx, cx
shr dx, 8
mov word [ebp - 0x112], dx
mov dx, ax
shr dx, 8
shr ecx, 0x10
shr eax, 0x10
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x144], esi
mov word [ebp - 0x116], dx
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x140], eax
jmp 0x5ae60c
mov esi, dword [ebp - 0x144]
mov edi, dword [ebp - 0x134]
mov eax, dword [ebp - 0x11c]
movzx ecx, byte [ebp + eax - 0x110]
imul esi, ecx
mov eax, 0x80808081
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, byte [ebp - 0x112]
sub edi, edx
mov dword [ebp - 0x13c], edi
movzx edi, byte [ebp - 0x116]
mov esi, edi
sub esi, eax
imul esi, ecx
mov eax, 0x80808081
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx edx, byte [ebp - 0x12c]
sub edi, eax
mov dword [ebp - 0x138], edi
movzx edi, byte [ebp - 0x140]
mov esi, edi
sub esi, edx
imul esi, ecx
mov eax, 0x80808081
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, edi
cmp ecx, ebx
jne 0x5ae69f
mov ecx, 0xff00
jmp 0x5ae6ba
movzx edx, byte [ebp - 0x138]
movzx ecx, al
movzx eax, byte [ebp - 0x13c]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
mov esi, dword [ebp - 0x11c]
xor edx, edx
mov eax, esi
mov edi, 0x10
div edi
push ecx
mov ecx, dword [ebp - 0x150]
push edx
push eax
push ecx
call dword [sym.imp.GDI32.dll_SetPixel]
inc esi
mov dword [ebp - 0x11c], esi
cmp esi, 0x100
jl 0x5ae600
mov eax, dword [ebp - 0x130]
test eax, eax
je 0x5ae6fb
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x150]
push eax
push edx
call fcn.004145e7
mov ecx, dword [ebp - 0x128]
push 0
push 1
push 0x19
push 0x10
push 0x10
add ecx, 0x574
call fcn.00411ce3
mov ecx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x128]
mov eax, dword [eax + 0x578]
push 0xff00
push ecx
push eax
call fcn.004155c9
mov edx, dword [eax + 0x78]
mov ecx, dword [edx]
call fcn.00407050
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 1
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
call fcn.004071f0
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0
call fcn.00414303
lea ecx, [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
call fcn.004143ff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005000ee
mov esp, ebp
pop ebp
ret