Function at 0x10019a95
Capabilities:
Get memory capacity
Resume thread
Terminate process

Disassembly:
mov eax, 0x1004bbce
call fcn.1004ae30
sub esp, 0x210
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x4c], edx
xor esi, esi
mov dword [ebp - 0xb4], ecx
inc esi
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x38], 6
push edi
mov dword [ebp - 0x2c], 0x2b90f998
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ebx
jmp 0x10019ae3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7c], 0xd0188753
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10019ad5
mov eax, dword [ebp - 0x18]
add eax, 0x530d
imul eax, eax, 0x6baf
test eax, eax
je 0x10019b0e
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setl dl
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
xor eax, eax
imul edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
cmp edx, 0x20274952
setle al
xor edx, edx
test eax, eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x18]
sete dl
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x18], ebx
jmp 0x10019bb9
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x7c]
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0xffffffff
setge al
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
neg ecx
sub ecx, 0x3e73
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp + eax*4 - 0x7c]
cmp ecx, 6
jbe 0x10019b86
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
cmp eax, 0xaec
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp ecx, 8
mov eax, dword [ebp + eax*4 - 0x7c]
setl dl
sub eax, edx
jne 0x10019bad
mov ecx, ebx
cmp dword [ebp - 0x7c], ebx
je 0x10019baf
mov ecx, esi
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x10019b49
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x28], 0x2bf5f40e
mov dword [ebp - 0x2c], 0x7ae9f903
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x18], ebx
jmp 0x10019c04
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x98], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10019bf3
mov dword [ebp - 0x18], ebx
jmp 0x10019c20
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1bc], 0x43c7d757
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10019c0f
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x10019c35
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push 0xfffffffffffffff7
mov dword [ebp - 0x90], ebx
pop edx
jmp 0x10019cc5
mov dword [ebp - 0x1c], 0x66e9
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x34], 0xc46d767c
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0xc75b167d
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
neg eax
push 0xfffffffffffffffd
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
pop ecx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x90]
cmp dword [ebp - 0x90], edx
jle 0x10019c43
push 0x5c
pop eax
push 2
mov dword [ebp - 0x74], 0x30059c06
mov esi, ebx
mov dword [ebp - 0x70], 0xd020e03
mov dword [ebp - 0x6c], 0xd040301
mov dword [ebp - 0x68], 0xbc042600
mov word [ebp - 0x64], 0xa228
mov byte [ebp - 0x62], 0x9a
mov word [ebp - 0x108], ax
pop edi
mov dword [ebp - 0x40], edi
cmp edi, 0x13
jae 0x1001a0cb
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x10019d2b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc0], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10019d1e
mov dword [ebp - 0x1c], 0x13
jmp 0x10019d5c
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x30], ebx
jmp 0x10019d53
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc0], ebx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 1
jl 0x10019d46
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe9
jge 0x10019d3a
movzx eax, byte [ebp - 0x74]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x10019ed1
movzx ecx, byte [ebp + edi - 0x74]
mov dword [ebp - 0x34], 0xf606
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0xbacd7953
mov dword [ebp - 0x34], 8
lea esi, [ecx + 1]
mov dword [ebp - 0x34], 0x5cbd9454
mov dword [ebp - 0x2c], 0x6887e08a
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x1c], ebx
jmp 0x10019dbc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x144], 0x61ab6ec7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10019dab
inc dword [ebp - 0x2c]
dec edi
mov dword [ebp - 0x1c], ebx
add edi, ecx
mov dword [ebp - 0x2c], 0x2372
cmp dword [ebp - 0x2c], 0x2414
mov dword [ebp - 0x40], edi
jle 0x10019e33
mov eax, ebx
xor esi, esi
mov dword [ebp - 0x38], eax
inc esi
mov edi, ebx
add eax, edi
lea ecx, [ebp - 0x204]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10019e02
mov eax, dword [eax]
push eax
call fcn.10036008
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x204]
call fcn.100040fa
mov eax, dword [ebp - 0x38]
inc edi
cmp edi, 0x21b2
jl 0x10019de8
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0xcaa
jl 0x10019de6
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x40]
mov dword [ebp - 0x1c], ebx
jmp 0x10019e45
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10019e38
cmp dword [ebp - 0x2c], 0x20a5
jge 0x10019e5f
push str.qvot_mwzzpeern_tgm_kek_cuqp
call fcn.10036008
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x10019ead
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x10019eaa
mov dword [ebp - 0x30], 0x23afc371
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x10019e89
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov dword [ebp - 0x30], ebx
jmp 0x10019e9f
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc4], 0x5425
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 1
jl 0x10019e8e
dec dword [ebp - 0x28]
jns 0x10019e73
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffc
jg 0x10019e68
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001a06c
push ebx
push 0x24f0
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
jmp 0x1001a06c
movzx edx, byte [ebp + edi - 0x73]
mov eax, edi
sub eax, esi
movzx eax, byte [ebp + eax - 0x76]
movzx eax, word [ebp + eax*2 - 0x114]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x74]
mov word [ebp + eax*2 - 0x114], cx
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x2c], 0x9ca3eaa3
mov dword [ebp - 0x1c], ebx
jmp 0x10019f20
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x120], 0xfffffffa
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10019f0f
xor esi, esi
inc esi
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], 0xb
jg 0x1001a067
mov dword [ebp - 0x30], 0x1dbeccce
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], 2
jg 0x1001a050
mov dword [ebp - 0x2c], 0xab1d6a56
mov dword [ebp - 0x2c], 0x1d10
cmp dword [ebp - 0x2c], 0x1f20
jle 0x10019fc6
mov edx, ebx
mov dword [ebp - 0x28], ebx
mov eax, ebx
mov dword [ebp - 0x38], ebx
mov edi, ebx
lea ecx, [edi + eax]
mov eax, edx
sar eax, cl
lea ecx, [ebp - 0x1d4]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10019f8c
mov eax, dword [eax]
push eax
call fcn.10036008
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1d4]
call fcn.100040fa
mov eax, dword [ebp - 0x38]
inc edi
mov edx, dword [ebp - 0x28]
cmp edi, 0x5e58
jl 0x10019f6d
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x54f9
jl 0x10019f6b
inc edx
mov dword [ebp - 0x28], edx
cmp edx, 0x3e6a
jl 0x10019f66
cmp dword [ebp - 0x2c], 0x1a7d
jge 0x10019fda
push str.shgqmac_qthcea_zpwrfgu_gkdlv_rdaaj_ryzh_sklfiiruz_ucqxb_dhlhvh_wlcdzw
call fcn.10036008
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x3c], 0x1606
cmp dword [ebp - 0x3c], 0x197c
jg 0x1001a074
mov dword [ebp - 0x2c], ebx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp + eax*4 - 0x120]
mov eax, dword [ebp - 0x120]
cmp ecx, eax
setge dl
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x3c], 0x134f
jge 0x1001a032
push str.upri_zxyede_mxesabges_jzcb_rbudwd_vwzpmhomt_yzfsaldej_ekfypsqt_vpns_giymoof_skpt
call fcn.10036008
pop ecx
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001a048
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
inc dword [ebp - 0x30]
jmp 0x10019f40
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001a05f
push ebx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
inc dword [ebp - 0x1c]
jmp 0x10019f2c
mov edi, dword [ebp - 0x40]
mov esi, ebx
add edi, 2
jmp 0x10019d06
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
or eax, edi
lea ecx, [ebp - 0x1ec]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001a095
mov eax, dword [eax]
push eax
call fcn.10036008
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1ec]
call fcn.100040fa
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x4f32
jl 0x1001a07b
inc edi
cmp edi, 0x4edb
jl 0x1001a076
push 0x1475
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov dword [ebp - 0x148], 7
mov word [ebp - 0x106], ax
lea ecx, [ebp - 0x15c]
mov word [ebp - 0x15c], ax
lea eax, [ebp - 0x114]
push eax
mov dword [ebp - 0x14c], ebx
call fcn.1000af16
mov dword [ebp - 4], 6
push 2
mov dword [ebp - 0x24], 0x7a4a12b5
mov dword [ebp - 0x1c], ebx
pop ecx
jmp 0x1001a124
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x168], 0x9ac7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001a113
xor esi, esi
inc esi
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], ebx
jl 0x1001a15b
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], ebx
jmp 0x1001a151
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x168], 0xb7ce
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jl 0x1001a140
dec dword [ebp - 0x24]
jns 0x1001a134
mov eax, dword [ebp - 0x24]
lea edi, [ebp - 0x114]
push dword [ebp - 0x4c]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x1a4]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.10003b2c
mov byte [ebp - 4], 7
mov dword [ebp - 0x4c], 0xc90a35f3
mov dword [ebp - 0x38], 0x478144ad
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x44], 0x5ef11ea
mov dword [ebp - 0x34], 0xd1337a3f
push 3
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x1001a1bd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001a1ac
mov dword [ebp - 0x18], ebx
jmp 0x1001a1d8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x12c], 0xdcdf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001a1c7
cmp dword [ebp - 0xa4], ebx
jne 0x1001a1e8
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
neg eax
inc eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jne 0x1001a207
mov ecx, ebx
cmp dword [ebp - 0x4c], ebx
je 0x1001a209
mov ecx, esi
mov eax, dword [ebp - 0x128]
inc dword [ebp - 0x128]
cmp eax, ecx
mov dword [ebp - 0x38], esi
mov eax, esi
mov ecx, dword [ebp - 0x38]
cmove eax, ebx
imul ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
mov eax, 0x89c089ce
setg dl
cmp eax, edx
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
je 0x1001a46d
mov dword [ebp - 0x18], ebx
jmp 0x1001a259
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xbc], 0xfaba
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001a248
mov dword [ebp - 0x18], ebx
jmp 0x1001a272
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x48], 0xc4ad1532
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001a264
mov dword [ebp - 0x24], ebx
jmp 0x1001a461
mov dword [ebp - 0x1c], 0x5f32
mov dword [ebp - 0x40], 0xf69bad97
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x3c], 4
cmp dword [ebp - 0x1c], ebx
jne 0x1001a4d6
mov eax, dword [ebp - 0xb8]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x48], eax
cmp eax, dword [ebp - 0xa0]
jle 0x1001a325
mov eax, dword [ebp - 0x4c]
sub eax, 0xb5c1
cmp eax, dword [ebp - 0x1c]
jne 0x1001a2cf
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xb8]
xor edx, edx
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x48]
inc ecx
cmp ecx, eax
sete dl
mov dword [ebp - 0x40], edx
xor edx, edx
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0xb8]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
lea eax, [ecx - 0x3fb446e2]
mov dword [ebp - 0x48], eax
test eax, eax
jne 0x1001a325
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x28], 0xc2fcb8f7
mov dword [ebp - 0x18], ebx
jmp 0x1001a454
mov dword [ebp - 0xa0], esi
cmp dword [ebp - 0x48], ebx
je 0x1001a316
mov dword [ebp - 0x2c], 0x64ea5f72
cmp dword [ebp - 0x40], ebx
jne 0x1001a3ad
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x48]
cmp eax, ecx
setle dl
cmp edx, 7
jl 0x1001a355
mov ecx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x1001a357
mov ecx, esi
mov eax, dword [ebp - 0x48]
sub eax, ecx
je 0x1001a365
mov ecx, esi
cmp dword [ebp - 0x1c], ebx
jne 0x1001a367
mov ecx, ebx
mov eax, dword [ebp - 0x44]
imul eax, ecx
mov ecx, 0xcb58b1ca
imul eax, eax, 0xfb88
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
imul eax, ecx, 0xcc8f
test eax, eax
je 0x1001a399
mov eax, esi
cmp dword [ebp - 0x44], ebx
jne 0x1001a39b
mov eax, ebx
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
cmp eax, 0xd1a6
setle cl
mov dword [ebp - 0x30], ecx
jmp 0x1001a45e
mov dword [ebp - 0x2c], 0x565c6936
mov dword [ebp - 0x34], 0x8a7deb65
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x28], ebx
jne 0x1001a41a
cmp dword [ebp - 0x18], ebx
jne 0x1001a3e9
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
cmp eax, 0xab384274
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x24]
mov ecx, ebx
jne 0x1001a41c
mov ecx, esi
mov eax, dword [ebp - 0x40]
xor edx, edx
cmp ecx, eax
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x30]
jne 0x1001a43b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setl dl
mov dword [ebp - 0x34], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x14
jl 0x1001a3cb
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffed
jg 0x1001a27f
jmp 0x1001a4d6
mov dword [ebp - 0x28], ebx
jmp 0x1001a483
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xd4], 7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1001a472
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001a49e
push ebx
push 0xf41
push ebx
call dword [sym.imp.ADVAPI32.dll_ControlService]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xcc]
neg ecx
mov eax, dword [ebp - 0xd0]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x2c], 0xbd13d8c5
mov dword [ebp - 0x2c], 0xed99ea7
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x28], ebx
jmp 0x1001a508
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x8c], 0xf9b3
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1001a4f7
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x1001a5b9
mov dword [ebp - 0x3c], 0xfffffff9
cmp dword [ebp - 0x8c], ebx
je 0x1001a537
mov eax, dword [ebp - 0x18]
mov ecx, esi
cmp dword [ebp + eax*4 - 0x8c], ebx
jne 0x1001a539
mov ecx, ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x8c]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x8c]
sete dl
imul ecx, edx, 0xdcef
xor edx, edx
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0x69393dda
setle al
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], ebx
jne 0x1001a58c
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp + eax*4 - 0x8c]
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
dec dword [ebp - 0x18]
jns 0x1001a51a
mov dword [ebp - 0x34], 0xf606
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0xbacd7953
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x34], 0x5cbd9454
mov dword [ebp - 0x2c], 0x6887e08a
mov dword [ebp - 0x28], ebx
jmp 0x1001a5f5
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x130], 0x61ab6ec7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x1001a5e4
inc dword [ebp - 0x2c]
mov ecx, ebx
push 0x5c
pop eax
push 2
mov dword [ebp - 0x60], 0xdd043300
mov word [ebp - 0x5c], 0x904f
mov byte [ebp - 0x5a], 0xea
mov word [ebp - 0x58], ax
pop edi
cmp edi, 2
jne 0x1001a626
push 5
pop ecx
push ecx
pop edi
jmp 0x1001a64f
movzx edx, byte [ebp + edi - 0x5f]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0x58]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x60]
add ecx, edx
mov word [ebp + eax*2 - 0x58], cx
mov ecx, ebx
add edi, 2
cmp edi, 7
jb 0x1001a61a
xor eax, eax
mov word [ebp - 0x56], ax
push 0xfffffffffffffffa
mov dword [ebp - 0x1c], 0xe1757117
mov dword [ebp - 0x1c], ebx
pop edi
jmp 0x1001a689
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001a683
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
mov eax, dword [ebp - 0x1c]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
je 0x1001a66c
xor eax, eax
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
lea ecx, [ebp - 0xf4]
lea eax, [ebp - 0x58]
mov dword [ebp - 0xe4], ebx
push eax
call fcn.1000af16
mov byte [ebp - 4], 8
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x3c], 0x867b8f5f
mov dword [ebp - 0x2c], 0x3edfa831
mov dword [ebp - 0x34], 0x5edade09
mov dword [ebp - 0x24], ebx
jmp 0x1001a6ec
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x54], 0xc04ee7d2
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1001a6de
mov dword [ebp - 0x24], ebx
jmp 0x1001a707
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xc8], 0xfffffffe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1001a6f6
mov eax, dword [ebp - 0x54]
xor edx, edx
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
cmp ecx, eax
setl dl
xor ecx, ecx
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x54]
cmp eax, esi
setg cl
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xc8], ecx
mov eax, dword [ebp - 0x3c]
sub eax, ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], 0x5a136951
mov dword [ebp - 0x28], ebx
jmp 0x1001a760
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x50], 0x8ec0ae97
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x1001a752
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1001a7d9
mov dword [ebp - 0x34], 0xffffffff
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x50], ebx
je 0x1001a7c4
mov dword [ebp - 0x28], ebx
jmp 0x1001a78f
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xdc], esi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1001a782
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x34], eax
jmp 0x1001a7d4
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001a7d4
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
dec dword [ebp - 0x18]
jns 0x1001a76d
mov dword [ebp - 0x18], ebx
jmp 0x1001a7ee
mov dword [ebp - 0x34], 4
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001a7de
push 0x5f
pop eax
mov word [ebp - 0x80], ax
xor eax, eax
mov word [ebp - 0x84], 0x1f00
mov word [ebp - 0x7e], ax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x44], 0x2285faaf
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x28], ebx
jmp 0x1001a830
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xfc], 0x31a2955e
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1001a81f
mov dword [ebp - 0x18], ebx
jmp 0x1001a9c6
mov dword [ebp - 0x1c], 0x2bf5f40e
mov dword [ebp - 0x40], 0x800f4d4e
mov dword [ebp - 0x34], 0x523668f7
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x34], 0x88afc007
mov dword [ebp - 0x28], ebx
jmp 0x1001a873
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1b0], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1001a866
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
add ecx, eax
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
mov eax, dword [ebp - 0x40]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
imul ecx, ecx, 0xf3b
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge bl
xor ecx, ecx
cmp ebx, eax
setl cl
xor ebx, ebx
add ecx, dword [ebp - 0x44]
jne 0x1001a8c9
mov eax, ebx
cmp dword [ebp - 0x40], ebx
je 0x1001a8cb
mov eax, esi
xor ecx, ecx
cmp eax, 0xaa4f
setg cl
xor eax, eax
cmp ecx, 0xe0c0
setge al
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
test ecx, ecx
js 0x1001a909
cmp dword [ebp - 0x40], ebx
jne 0x1001a909
cmp dword [ebp - 0x24], ebx
je 0x1001a90c
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x18]
jle 0x1001a975
mov dword [ebp - 0x30], 0xfea1
xor edx, edx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setge dl
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0x18], ebx
jge 0x1001a957
cmp dword [ebp - 0x30], ebx
jne 0x1001a9d0
jmp 0x1001a9c3
mov dword [ebp - 0x30], ebx
jmp 0x1001a96d
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xfc], 0x67326dc7
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x1001a95c
jmp 0x1001a9c3
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x34], 0xf0102089
mov dword [ebp - 0x24], ebx
jmp 0x1001a999
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x16c], 0x37ece519
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1001a988
mov dword [ebp - 0x24], ebx
jmp 0x1001a9b4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x104], 0x3ecb6aef
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001a9a3
inc dword [ebp - 0x2c]
dec dword [ebp - 0x100]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffea
jl 0x1001a83e
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x1001ab64
mov dword [ebp - 0x40], 0x5bdc
cmp dword [ebp - 0x40], 0x5d82
jle 0x1001aa62
mov dword [ebp - 0x3c], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
cdq
mov ecx, ebx
idiv edi
mov edi, dword [ebp - 0x3c]
mov eax, edx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], eax
or eax, ecx
mov ecx, 0x10062a18
or eax, edi
cdq
push edx
push eax
call fcn.10003a17
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0x5d4a
jl 0x1001aa09
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x6fa0
jl 0x1001a9f9
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x26c0
jl 0x1001a9f4
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp eax, 0x4aa3
jl 0x1001a9ef
push 0x1887
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], esi
jg 0x1001ab18
mov dword [ebp - 0x3c], 0x177f
cmp dword [ebp - 0x3c], 0x194b
jle 0x1001aad3
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x21c]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001aaa1
mov eax, dword [eax]
push eax
call fcn.10036008
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x21c]
call fcn.100040fa
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x16c
jl 0x1001aa85
inc edi
cmp edi, 0x7886
jl 0x1001aa80
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001aaf5
push 0xca0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
cmp dword [ebp - 0x3c], 0x1699
jge 0x1001ab09
push str.wsm_yfgof_pivwmj_rnkts_blpk_utesn
call fcn.10036008
pop ecx
mov dword [ebp - 4], 8
inc dword [ebp - 0x24]
jmp 0x1001aa65
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x40], 0x5af8
jge 0x1001ab55
mov edx, str.ejhoih_sfjwze_rrfhj_jytdpmn_pvyw_dbfudf_knvbw_tbg_qho_suzhhyz_lhf_efcdemxti
mov ecx, 0x10062a18
call fcn.10006198
jmp 0x1001ab55
mov dword [ebp - 4], 8
dec dword [ebp - 0x18]
jmp 0x1001a9d3
xor eax, eax
mov dword [ebp - 0x178], 7
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x18c]
lea eax, [ebp - 0x80]
mov dword [ebp - 0x17c], ebx
push eax
call fcn.1000af16
mov byte [ebp - 4], 0xd
push 2
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x24], ebx
pop ecx
jmp 0x1001aba8
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x174], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1001ab9b
mov dword [ebp - 0x24], ebx
jmp 0x1001abc3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb0], 9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001abb2
mov dword [ebp - 0xac], ebx
jmp 0x1001abe8
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x174], 0xfffffffc
inc dword [ebp - 0xac]
cmp dword [ebp - 0xac], ecx
jl 0x1001abd1
push dword [ebp - 0xe4]
cmp dword [ebp - 0xe0], 8
lea eax, [ebp - 0xf4]
push ebx
cmovae eax, dword [ebp - 0xf4]
lea ecx, [ebp - 0x1a4]
push eax
call fcn.1000af9e
cmp eax, 0xffffffff
je 0x1001ac35
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x18c]
push ecx
push esi
push eax
lea ecx, [ebp - 0x1a4]
call fcn.1000b6af
jmp 0x1001abf0
mov ecx, dword [ebp - 0xb4]
lea eax, [ebp - 0x1a4]
push eax
lea edx, [ebp - 0x15c]
call fcn.1001ae91
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x18c]
call fcn.100042fb
push ebx
push esi
lea ecx, [ebp - 0xf4]
call fcn.100042fb
push ebx
push esi
lea ecx, [ebp - 0x1a4]
call fcn.100042fb
push ebx
push esi
lea ecx, [ebp - 0x15c]
call fcn.100042fb
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xb4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret