Function at 0x100176f1
Capabilities:
Get common file path

Disassembly:
mov eax, 0x10057b25
call fcn.10056ec8
sub esp, 0x218
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x24], 0x4eea
cmp dword [ebp - 0x24], 0x4fce
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x158], ebx
jle 0x1001777e
push ebx
call dword [sym.imp.USER32.dll_RegisterClassA]
xor esi, esi
mov edi, ebx
inc esi
mov eax, ebx
mov dword [ebp - 0x2c], ebx
or eax, edi
lea ecx, [ebp - 0x208]
cdq
push edx
push eax
call fcn.10001ba3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10017753
mov eax, dword [eax]
push eax
call fcn.100410e1
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x208]
call fcn.100122d9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x4548
jl 0x10017739
inc edi
cmp edi, 0x5561
jl 0x10017734
mov dword [ebp - 0x18], 0xf2c29a3d
cmp dword [ebp - 0x24], 0x4e91
jge 0x10017799
push str.tuuv_lkuhrif_posqknn
call fcn.100410e1
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x100177b0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3c], 0xaf1124f0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x100177a2
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x100177ce
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x10017955
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x2c], 0x376fbfcc
mov dword [ebp - 0x2c], 0x56e623b2
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x10017946
mov dword [ebp - 0x30], 0x116f
cmp dword [ebp - 0x30], 0x1283
jle 0x10017881
mov eax, ebx
xor esi, esi
mov dword [ebp - 0x2c], eax
inc esi
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, edi
mov edi, ebx
shl eax, cl
mov dword [ebp - 0x38], eax
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x1d8]
cdq
push edx
push eax
call fcn.10001ba3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10017844
mov eax, dword [eax]
push eax
call fcn.100410e1
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1d8]
call fcn.100122d9
mov eax, dword [ebp - 0x38]
inc edi
cmp edi, 0x6347
jl 0x10017828
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x692a
jl 0x1001781f
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x5dfa
jl 0x1001781a
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x30], 0xda7
jge 0x1001789c
push str.nwrwhu_zcwlnzd_ilaxpkias_isqqwd_ixvhft_xbahcthve_htgicltk_vcdrweffm_vbnlji
call fcn.100410e1
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0xfffffff6
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
mov eax, dword [ebp + eax*4 - 0x3c]
cmp edx, eax
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setne dl
sub edx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x3c]
sub eax, edx
neg eax
sbb eax, eax
inc eax
sub eax, 0x3e8c
jne 0x100178f3
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x3c], ebx
jne 0x100178f3
mov edx, ebx
jmp 0x100178f6
xor edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
setne cl
add ecx, dword [ebp - 0x3c]
je 0x1001790c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x3c], ebx
jne 0x10017946
inc dword [ebp - 0x20]
jmp 0x100177f9
mov dword [ebp - 0x20], 1
inc dword [ebp - 0x18]
jmp 0x100177d1
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x20], 0x1d
cmp dword [ebp - 0x20], 0x13
je 0x10017997
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov edi, dword [sym.imp.USER32.dll_GetDC]
cmp dword [ebp - 0x20], ebx
jne 0x10017997
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x1001798e
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x13
jne 0x10017975
mov dword [ebp - 0x68], 0x3034304
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x64], 0x3010d02
mov dword [ebp - 0x60], 0x5c013006
mov dword [ebp - 0x5c], 0x2b051b00
mov dword [ebp - 0x30], ebx
push 1
call fcn.10011bd7
push 3
mov dword [ebp - 0x24], 0x82ecc90c
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x100179e3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xbc], 4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100179d2
xor esi, esi
mov dword [ebp - 0x18], ebx
inc esi
jmp 0x10017a03
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0xc9d9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100179f0
mov dword [ebp - 0x30], ebx
jmp 0x10017add
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x28], 0x98072f25
mov dword [ebp - 0x18], ebx
jmp 0x10017ad0
mov dword [ebp - 0x20], 0xfffffff7
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xbc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xbc]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xbc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xbc]
cmp dword [ebp - 0x18], eax
jle 0x10017a6f
mov eax, dword [ebp - 0x94]
cmp dword [eax], ebx
mov eax, ebx
je 0x10017a71
mov eax, esi
mov ecx, dword [ebp - 0x20]
imul ecx, eax
mov eax, dword [ebp - 0x94]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x18]
cmp ecx, 0x339b8842
jne 0x10017a9f
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
test eax, eax
mov eax, dword [ebp - 0x94]
setle cl
xor edx, edx
cmp ecx, dword [eax]
setle dl
xor eax, eax
cmp edx, 0xcb2d
setge al
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10017a26
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jle 0x10017a10
mov dword [ebp - 0x24], ebx
jmp 0x10017af9
mov eax, dword [ebp - 0x94]
cmp dword [eax], ebx
jne 0x10017aff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xb
jne 0x10017aec
lea ecx, [ebp - 0x94]
call fcn.10011c39
push 0x61
pop eax
mov word [ebp - 0xe8], ax
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x28], esi
push edi
call fcn.10011bd7
push esi
lea ecx, [ebp - 0xc8]
mov dword [ebp - 4], 4
call fcn.10011bd7
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x38], 0xf3b8c105
mov dword [ebp - 0x18], ebx
jmp 0x10017b58
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 0x1bd97a88
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10017b45
mov dword [ebp - 0x18], ebx
jmp 0x10017b75
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0x735e4b78
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10017b62
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x24]
test eax, eax
je 0x10017bb8
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
xor eax, eax
cmp edx, 0x76f
setne al
sub eax, edx
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, edx
mov edx, esi
setge al
cmp eax, 0x52835357
jg 0x10017bba
mov edx, ebx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x120]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0xc8]
mov dword [eax], edx
mov dword [ebp - 0x38], 0xffffffff
call fcn.10011c39
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.10011c39
push 2
pop edx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], edx
cmp edx, 0x10
jae 0x10017e8f
movzx eax, byte [ebp - 0x68]
lea eax, [eax*2 + 2]
cmp edx, eax
jne 0x10017d84
movzx eax, byte [ebp + edx - 0x68]
dec edx
mov dword [ebp - 0x20], 0xfffffffb
add edx, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 0xfffffffd
lea ecx, [eax + 1]
mov dword [ebp - 0x28], 0x623b26d5
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x30], ebx
jmp 0x10017c56
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x6c], 0xf1124f01
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jl 0x10017c48
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10017c7a
push 0x3c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x10017e84
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x28], 0x4b83
cmp dword [ebp - 0x28], 0x4bae
jle 0x10017ce3
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov dword [ebp - 0x38], ebx
mov eax, ebx
mov dword [ebp - 0x78], 0x562e
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
cdq
mov ecx, 0x10072d38
push edx
push eax
call fcn.10011982
mov eax, dword [ebp - 0x30]
add eax, ebx
dec dword [ebp - 0x78]
mov dword [ebp - 0x30], eax
jne 0x10017cba
inc ebx
push 0
mov dword [ebp - 0x38], ebx
cmp ebx, 0x37e9
pop ebx
jl 0x10017cab
mov dword [ebp - 4], 5
cmp dword [ebp - 0x28], 0x48f2
jge 0x10017d02
mov edx, str.htxhqt_wdxcy_vgrcrpa_rfskafkks_fxe_jnwcb_uwt_cblijgtf_ywrbjvzmy_pkq_sscaorfn_kbpitn
mov ecx, 0x10072d38
call fcn.10016228
or dword [ebp - 4], 0xffffffff
dec dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x28]
jne 0x10017d1d
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6c], ecx
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jne 0x10017d36
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], esi
inc dword [ebp - 0x20]
jmp 0x10017c7d
push dword [ebp - 0x80]
movdqa xmm0, xmmword [0x10065f10]
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x1a4]
mov dword [ebp - 0xa0], ebx
push eax
push ebx
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x9c], ebx
movdqu xmmword [ebp - 0x1a4], xmm0
mov dword [ebp - 0x98], ebx
call fcn.1001720b
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], ebx
jl 0x10017e44
mov dword [ebp - 0x30], ebx
jmp 0x10017de5
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x74], 0xa4f402e3
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x10017dd7
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10017e00
push 0xaba
push ebx
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [ebp - 0x74], ebx
jmp 0x10017e3a
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10017e29
push 0xe57
push 0xa05
push 0x41c
push 0x1651
push ebx
call dword [sym.imp.USER32.dll_SetRect]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
cmp dword [eax + ecx*4], ebx
jne 0x10017e3f
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], edi
jle 0x10017e05
dec dword [ebp - 0x20]
jns 0x10017dd2
lea ecx, [ebp - 0xa0]
call fcn.10011c39
mov eax, dword [ebp - 0x24]
movzx edx, byte [ebp + eax - 0x67]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], ebx
movzx eax, byte [ebp + eax - 0x6a]
movzx eax, word [ebp + eax*2 - 0xf0]
mov ecx, eax
and eax, edx
or ecx, edx
mov edx, dword [ebp - 0x24]
sub ecx, eax
movzx eax, byte [ebp + edx - 0x68]
mov word [ebp + eax*2 - 0xf0], cx
jmp 0x10017e87
mov edx, dword [ebp - 0x24]
add edx, 2
jmp 0x10017bf5
mov dword [ebp - 0x34], 0xb01d
lea ecx, [ebp - 0x154]
push edi
call fcn.10011bd7
mov dword [ebp - 0x4c], 0xffff
mov dword [ebp - 0x28], 0x395e2de4
mov dword [ebp - 0x18], ebx
jmp 0x10017ec6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c0], 0x94543beb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10017eb5
mov dword [ebp - 0x18], ebx
jmp 0x10017ee4
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x154]
mov dword [eax + ecx*4], 0x2a3cc92e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10017ed1
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x154]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], 0x9737e0d1
call fcn.10011c39
xor eax, eax
mov dword [ebp - 0x134], 7
mov word [ebp - 0xe2], ax
lea ecx, [ebp - 0x148]
mov word [ebp - 0x148], ax
lea eax, [ebp - 0xf0]
push eax
mov dword [ebp - 0x138], ebx
call fcn.1001251f
mov dword [ebp - 4], 7
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x20], 2
push esi
call fcn.10011bd7
mov dword [ebp - 0x34], 0x97a61eef
mov dword [ebp - 0x18], ebx
jmp 0x10017f6a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b0], 0xeac8b13e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10017f59
mov dword [ebp - 0x18], ebx
jmp 0x10017f87
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xfc]
mov dword [eax + ecx*4], 0x29729cf3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10017f74
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], ebx
jl 0x10017fa9
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x1b0], ebx
jne 0x10017fa9
dec dword [ebp - 0x20]
jns 0x10017f98
mov dword [ebp - 0x20], ebx
jmp 0x10017fce
mov dword [ebp - 0x34], 4
xor edx, edx
mov dword [ebp - 0x4c], edi
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xfc]
cmp ecx, dword [eax]
setl dl
mov dword [ebp - 0x4c], edx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffec
jge 0x10017fae
lea ecx, [ebp - 0xfc]
call fcn.10011c39
mov dword [ebp - 0x38], ebx
push esi
lea ecx, [ebp - 0xb0]
call fcn.10011bd7
mov dword [ebp - 0x20], 0x56f9b2cf
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x24], ebx
jmp 0x10018010
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb0]
mov dword [eax + ecx*4], 0xdde0bcd8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10017ffd
mov dword [ebp - 0x20], ebx
jmp 0x1001805c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb0]
cmp dword [eax + ecx*4], 0x77eb9323
jne 0x1001803d
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x28], esi
cmp dword [eax + ecx*4], ebx
jne 0x10018040
mov dword [ebp - 0x28], ebx
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0xb0]
mov ebx, dword [ebp - 0x28]
cmp ebx, dword [eax + ecx*4]
sete dl
mov dword [ebp - 0x34], edx
inc dword [ebp - 0x20]
xor ebx, ebx
cmp dword [ebp - 0x20], ebx
jle 0x1001801a
lea ecx, [ebp - 0xb0]
call fcn.10011c39
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov word [ebp + eax*2 - 0xf0], cx
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 8
jb 0x10017fe2
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x194]
call fcn.10011a97
push 4
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 8
call fcn.10011bd7
mov byte [ebp - 4], 9
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x28], 0x8c7b5c6e
mov dword [ebp - 0x24], ebx
jmp 0x100180ce
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x108]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x100180bf
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], ebx
jl 0x10018121
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10018105
push 0x1149
push ebx
push ebx
push ebx
push ebx
push 0x114b
push 0x1106
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x108]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x20]
jns 0x100180dc
cmp dword [ebp - 0x20], ebx
je 0x10018185
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x24], 0x7e780ca9
cmp dword [ebp - 0x20], ebx
jne 0x10018148
mov dword [ebp - 0x20], 0xee6d058a
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, ebx
cmp dword [ebp - 0x28], ebx
je 0x1001814a
mov eax, esi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], ebx
jmp 0x1001817b
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10018178
push 0x9f6
push 0x1002
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x10018158
jmp 0x1001824c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001824c
mov dword [ebp - 0x38], 0x2986
cmp dword [ebp - 0x38], 0x29ad
jle 0x10018216
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
cdq
idiv ecx
mov dword [ebp - 0x2c], ebx
mov eax, edx
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x2c]
shl eax, cl
lea ecx, [ebp - 0x1f0]
cdq
push edx
push eax
call fcn.10001ba3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100181d4
mov eax, dword [eax]
push eax
call fcn.100410e1
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1f0]
call fcn.100122d9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x3e32
mov eax, dword [ebp - 0x34]
jl 0x100181b7
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x52cd
jl 0x100181ac
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x4b36
jl 0x100181a7
push ebx
push 0x11db
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
cmp dword [ebp - 0x38], 0x28e2
jge 0x10018245
push str.udu_sflea_vpk_kmwtz_nvqkemy_jtp_xqxhrrhw_xodlqnz_fcpsne_vjuojjktl_vcgc_eytlvu
call fcn.100410e1
pop ecx
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 8
call fcn.10011c39
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x38], 0x4cc3
cmp dword [ebp - 0x38], 0x504b
jle 0x100182df
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
cdq
idiv ecx
lea ecx, [ebp - 0x220]
and edx, dword [ebp - 0x24]
mov eax, edx
cdq
push edx
push eax
call fcn.10001ba3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001829f
mov eax, dword [eax]
push eax
call fcn.100410e1
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x220]
call fcn.100122d9
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x4d5b
jl 0x1001827f
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x293d
jl 0x1001827a
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x7172
jl 0x10018275
push 4
lea ecx, [ebp - 0x164]
call fcn.10011bd7
cmp dword [ebp - 0x38], 0x4be7
jge 0x10018300
push str.gzqun_ugeip_nvoij_iysyu_jrgo_jpxh_pawbdtouq_ftssel_irzzczw_ccjoyou_qifwnvk_pvwjwyc_wyudcu_bhuoommam
call fcn.100410e1
pop ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
jmp 0x10018322
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1001830f
dec dword [ebp - 0x28]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10018340
push 0x513
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea ecx, [ebp - 0x164]
call fcn.10011c39
mov dword [ebp - 0x20], 0xc57e
mov dword [ebp - 0x28], 0xa62a9695
mov dword [ebp - 0x18], 0x90635300
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x12c], esi
mov dword [ebp - 0x128], esi
mov dword [ebp - 0x124], esi
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], 0x8ff43993
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setg cl
xor edx, edx
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], 0xcb51404f
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
mov dword [ebp - 0x130], edx
xor edx, edx
mov dword [ebp - 0x28], 0xf09a
mov eax, dword [ebp - 0x28]
test eax, eax
mov eax, dword [ebp - 0x20]
sets dl
sub edx, 0xcfb6
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x24], ebx
je 0x10018428
mov eax, esi
cmp dword [ebp - 0x38], ebx
jne 0x1001842a
mov eax, ebx
push 0x5c
mov dword [ebp - 0x34], eax
mov ecx, ebx
pop eax
push 2
mov word [ebp - 0x48], ax
pop eax
mov byte [ebp - 0x58], bl
mov dword [ebp - 0x57], 0x96f204de
mov word [ebp - 0x53], 0x5ad2
mov dword [ebp - 0x2c], eax
cmp eax, 2
jne 0x10018458
push 5
pop ecx
push ecx
pop eax
jmp 0x10018485
movzx edx, byte [ebp + eax - 0x57]
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5a]
movzx ecx, word [ebp + eax*2 - 0x48]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x2c]
add ecx, edx
movzx eax, byte [ebp + eax - 0x58]
mov word [ebp + eax*2 - 0x48], cx
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
add eax, 2
mov dword [ebp - 0x2c], eax
cmp eax, 7
jb 0x1001844c
xor eax, eax
mov word [ebp - 0x46], ax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x34], 0x17779a7b
mov dword [ebp - 0x24], ebx
jmp 0x100184c0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1b8], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100184af
dec dword [ebp - 0x28]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100184ed
push ebx
push 0x264b
push 0x1ea0
push 0xf13
push 0xd6d
call dword [sym.imp.GDI32.dll_CreateBitmap]
xor eax, eax
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
lea ecx, [ebp - 0xe0]
lea eax, [ebp - 0x48]
mov dword [ebp - 0xd0], ebx
push eax
call fcn.1001251f
push 0x5f
pop eax
mov byte [ebp - 4], 0xe
mov ecx, ebx
push 2
mov word [ebp - 0x50], ax
pop eax
mov dword [ebp - 0x48], ebx
mov byte [ebp - 0x44], bl
mov dword [ebp - 0x43], 0x33a5025b
mov dword [ebp - 0x2c], eax
cmp eax, 2
jne 0x10018540
mov ecx, edi
mov eax, edi
jmp 0x1001856d
movzx edx, byte [ebp + eax - 0x43]
sub eax, ecx
movzx eax, byte [ebp + eax - 0x46]
movzx ecx, word [ebp + eax*2 - 0x50]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x2c]
add ecx, edx
movzx eax, byte [ebp + eax - 0x44]
mov word [ebp + eax*2 - 0x50], cx
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
add eax, 2
mov dword [ebp - 0x2c], eax
cmp eax, 5
jb 0x10018535
xor eax, eax
lea ecx, [ebp - 0x114]
mov word [ebp - 0x4e], ax
mov dword [ebp - 0x18], 0xd3c891c5
mov dword [ebp - 0x28], 0xfffffffb
mov dword [ebp - 0x28], esi
push 4
call fcn.10011bd7
mov dword [ebp - 0x34], 5
mov dword [ebp - 0x20], ebx
jmp 0x100185b2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7c], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100185a8
mov dword [ebp - 0x20], ebx
jmp 0x100185cf
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100185bc
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
add eax, 0xffffe255
mov dword [ebp - 0x7c], eax
cmp eax, dword [ebp - 0x18]
jle 0x100185f0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x7c]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setg dl
cmp edx, dword [ebp - 0x18]
jge 0x10018609
mov ecx, ebx
cmp dword [ebp - 0x18], ebx
je 0x1001860b
mov ecx, esi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
imul ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x114]
mov dword [eax + 0xc], ecx
lea ecx, [ebp - 0x114]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0xd7d04549
call fcn.10011c39
xor eax, eax
mov dword [ebp - 0x168], 7
mov word [ebp - 0x17c], ax
lea ecx, [ebp - 0x17c]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x16c], ebx
push eax
call fcn.1001251f
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1001868a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x88], 0xfffffff8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10018679
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001869f
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov dword [ebp - 0x88], 0x11
jmp 0x100186d5
mov dword [ebp - 0x24], 0xaa9ac70c
mov dword [ebp - 0x24], ebx
jmp 0x100186c9
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100186c6
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1a
jge 0x100186b7
dec dword [ebp - 0x88]
cmp dword [ebp - 0x88], 4
jge 0x100186ab
push dword [ebp - 0xd0]
cmp dword [ebp - 0xcc], 8
lea eax, [ebp - 0xe0]
push ebx
cmovae eax, dword [ebp - 0xe0]
lea ecx, [ebp - 0x194]
push eax
call fcn.10018c49
cmp eax, 0xffffffff
je 0x10018723
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x17c]
push ecx
push esi
push eax
lea ecx, [ebp - 0x194]
call fcn.10018955
jmp 0x100186de
mov ecx, dword [ebp - 0x80]
lea eax, [ebp - 0x194]
push eax
lea edx, [ebp - 0x148]
call fcn.10018cec
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x17c]
call fcn.100125a7
push ebx
push esi
lea ecx, [ebp - 0xe0]
call fcn.100125a7
push ebx
push esi
lea ecx, [ebp - 0x194]
call fcn.100125a7
push ebx
push esi
lea ecx, [ebp - 0x148]
call fcn.100125a7
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret