Function at 0x10018936
Capabilities:
Get memory capacity
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
push ebx
mov ebx, ecx
mov dword [ebp - 0x18], 0xba76aabe
push esi
xor ecx, ecx
mov dword [ebp - 0x80], edx
push edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 4], ecx
jmp 0x10018969
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1b8], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x10018958
mov dword [ebp - 4], ecx
jmp 0x10018985
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x13c], 0x27557bc7
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x10018974
push 3
pop edi
mov dword [ebp - 0x18], ecx
push 1
pop esi
cmp dword [ebp - 0x18], edi
jg 0x10018a81
mov ebx, 0xca70051e
mov dword [ebp - 4], 0x67d92612
mov dword [ebp - 8], ecx
jmp 0x100189bb
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xc8], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x100189ae
mov dword [ebp - 0xc8], ecx
cmp dword [ebp - 0xc8], edi
jg 0x10018a41
mov dword [ebp - 0x20], 0x7e81
xor ecx, ecx
mov eax, dword [ebp - 0x1b4]
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x20]
sub edx, eax
imul eax, dword [ebp - 0x20], 0x7f45
cmp eax, edx
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1ac]
setle dl
imul edx, eax
cmp edx, dword [ebp - 0xc0]
jle 0x10018a1c
cmp dword [ebp - 0xc8], 0
je 0x10018a1c
mov eax, esi
jmp 0x10018a1e
xor eax, eax
cmp ebx, eax
mov eax, dword [ebp - 0xc8]
sbb ecx, ecx
neg ecx
mov dword [ebp + eax*4 - 0x1b8], ecx
inc dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], edi
jle 0x100189ce
xor ecx, ecx
mov dword [ebp - 4], ecx
jmp 0x10018a6d
mov dword [ebp - 0x28], 0x7045b365
mov dword [ebp - 8], ecx
jmp 0x10018a5f
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x19c], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10018a52
inc dword [ebp - 0x138]
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jle 0x10018a46
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x100189a2
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 4], 0x81c2900
mov dword [ebp - 0x24], ecx
mov dword [ebp - 4], ecx
jmp 0x10018a9e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x50], 0x1713b910
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10018a90
mov dword [ebp - 4], ecx
jmp 0x10018ab9
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x14c], 9
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x10018aa8
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], ecx
jl 0x10018b62
mov dword [ebp - 0x2c], 5
mov dword [ebp - 8], ecx
jmp 0x10018ae8
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1a8], 0xca335c22
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x10018ad7
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x50]
sub eax, 0x6c7d95fb
jne 0x10018b03
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 4]
push 0
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x50]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, 0xb593
mov dword [ebp + eax*4 - 0x50], edx
mov eax, dword [ebp - 0x2c]
setl cl
xor edx, edx
cmp ecx, eax
setl dl
xor ecx, ecx
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x148]
cmp edx, eax
setg cl
mov dword [ebp - 0x148], ecx
dec dword [ebp - 4]
pop ecx
jns 0x10018acb
mov dword [ebp - 8], ecx
jmp 0x10018b78
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x114], 0xe1757117
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x10018b67
mov dword [ebp - 0x110], ecx
jmp 0x10018bae
mov byte [ebp - 0x11], cl
cmp byte [ebp - 0x11], 0
je 0x10018ba8
push ecx
push 0x2698
push 0x1ed5
push 0x1eab
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
xor ecx, ecx
dec dword [ebp - 0x110]
cmp dword [ebp - 0x110], 0xffffffe7
jge 0x10018b85
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], 0xffffffff
mov byte [ebp - 0x11], cl
cmp byte [ebp - 0x11], 0
je 0x10018be4
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
xor ecx, ecx
mov byte [ebp - 0x11], cl
cmp byte [ebp - 0x11], 0
je 0x10018c04
push 0x210d
push 0xd0e
push 0xbac
call dword [sym.imp.KERNEL32.dll_MulDiv]
xor ecx, ecx
mov dword [ebp - 0x20], 0xfffffffb
xor edx, edx
mov dword [ebp - 4], 0xd1ad
inc edx
mov dword [ebp - 0x2c], 0xe64e6dc6
mov dword [ebp - 0x2c], 0x889a278c
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x18], ecx
jmp 0x10018c38
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x120], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10018c2b
mov dword [ebp - 0x18], ecx
jmp 0x10018c53
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe4], 0xb8f1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10018c42
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 4]
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 4], 0
jne 0x10018cbb
cmp dword [ebp - 0xe4], 0
jne 0x10018cbb
xor edx, edx
jmp 0x10018cbe
xor edx, edx
inc edx
mov eax, dword [ebp - 0xdc]
xor ecx, ecx
cmp edx, eax
mov eax, 0x28abf8b2
push 2
sete cl
mov dword [ebp - 0x24], ecx
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x10], 0xdd9cd443
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x24], 0xb6eab3cf
mov dword [ebp - 0x38], 9
mov dword [ebp - 8], 0xfffffffb
mov dword [ebp - 4], 0x6282
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0xc], ecx
pop edx
jmp 0x10018d36
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xb0], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x10018d29
mov dword [ebp - 0xc], ecx
jmp 0x10018d4d
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x160], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x10018d40
mov dword [ebp - 0xc], ecx
jmp 0x10018d69
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x134], 0x6a37d7c8
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x10018d58
cmp dword [ebp - 0xac], ecx
je 0x10018d9b
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x15c], eax
inc dword [ebp - 0x10]
test eax, eax
je 0x10018d90
mov eax, dword [ebp - 0x10]
sub eax, 0xfa01
jne 0x10018d96
mov eax, dword [ebp - 0x15c]
xor eax, eax
inc eax
jmp 0x10018d9d
mov eax, ecx
mov dword [ebp - 0x40], eax
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setge dl
xor eax, eax
cmp edx, 0x320f
setne al
sub eax, dword [ebp - 0xac]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xb0]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x130], ecx
mov eax, dword [ebp - 0xb0]
cmp eax, 0x1ad386cc
setle dl
xor eax, eax
test ecx, ecx
sete al
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0xb0]
sub edx, eax
mov eax, dword [ebp - 4]
cmp edx, eax
setle cl
mov dword [ebp - 0x104], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x104], 0xaf2c
mov eax, dword [ebp - 0x18]
test eax, eax
setle cl
xor edx, edx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x38], 7
mov dword [ebp - 4], 0x5b9b55bb
mov dword [ebp - 0x18], 1
mov dword [ebp - 8], edx
jmp 0x10018e6e
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x54], 0x89351f20
inc dword [ebp - 8]
cmp dword [ebp - 8], 1
jl 0x10018e60
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0xffffffe6
jne 0x100190a7
push 0xfffffffffffffff9
pop ecx
mov dword [ebp - 8], 1
mov dword [ebp - 0x10], 0x94e8fe75
mov dword [ebp - 0x28], 0x7cce45d7
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x40], 0x552b8909
mov dword [ebp - 0xc], edx
jmp 0x10018eb9
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x190], 0xcd4a7974
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x10018ea8
mov dword [ebp - 0xc], edx
jmp 0x10018ed5
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1f0], 0xfffffffb
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x10018ec4
mov dword [ebp - 0xc], edx
jmp 0x10018ef1
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1c0], 0xa125
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x10018ee0
mov dword [ebp - 0xc], edx
jmp 0x10018f09
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xcc], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 1
jl 0x10018efc
mov dword [ebp - 8], edx
cmp dword [ebp - 8], edx
jl 0x10019095
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0xee72c34c
mov dword [ebp - 0x28], 0xa165f5c9
mov dword [ebp - 0x58], 0xcc321a0
mov dword [ebp - 0x3c], 0x44469448
mov dword [ebp - 0x3c], 0x34ffdeab
mov dword [ebp - 0x3c], 0xa83fb18b
mov dword [ebp - 0xa8], 6
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x3c], 0x804524be
mov dword [ebp - 0x3c], 0x76492a41
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0x1dc], ecx
mov dword [ebp - 0x1d8], ecx
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x54]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 4]
jg 0x10018fe0
inc dword [ebp - 0x40]
jne 0x10018fba
cmp dword [ebp - 0x54], edx
je 0x10018fb1
cmp dword [ebp - 0x18], edx
jne 0x10018fba
cmp dword [ebp - 0xc], edx
jne 0x10018fba
mov eax, edx
jmp 0x10018fbd
xor eax, eax
inc eax
imul ecx, eax, 9
mov eax, dword [ebp - 0x1e8]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setne dl
sub edx, eax
jne 0x10018fde
mov ecx, edx
jmp 0x10018fe3
xor edx, edx
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x54]
add eax, ecx
xor ecx, ecx
cmp eax, 0xd22
setl cl
mov dword [ebp - 0x18], ecx
imul eax, dword [ebp - 0x18], 0xa093
cmp eax, dword [ebp - 0x54]
jl 0x1001900a
cmp dword [ebp - 4], edx
jne 0x1001900a
mov ecx, edx
jmp 0x1001900d
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 4]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c0]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 4], 0xffffffff
je 0x10019033
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x1e8]
xor edx, edx
mov ecx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
setl dl
cmp edx, dword [ebp - 0x40]
jle 0x10019051
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 8]
push 0
mov eax, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setle dl
mov dword [ebp - 0x24], edx
dec dword [ebp - 8]
pop edx
push 0xfffffffffffffff9
pop ecx
jns 0x10018f1b
cmp dword [ebp - 0x54], edx
jne 0x100190a7
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe6
je 0x10018e84
mov dword [ebp - 0x40], 0xe101
mov dword [ebp - 8], edx
mov dword [ebp - 8], 0xfffffff5
jmp 0x1001913d
mov dword [ebp - 0x28], 1
mov dword [ebp - 4], edx
jmp 0x100190da
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x128], 0xffff
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x100190c9
mov eax, dword [ebp - 0x124]
xor ecx, ecx
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 8]
cmp eax, 0x184d
setl cl
imul ecx, dword [ebp - 8]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, 0x3c236633
jne 0x1001910f
cmp dword [ebp - 8], edx
je 0x10019112
xor edx, edx
inc edx
mov eax, dword [ebp - 0x124]
xor ecx, ecx
cmp eax, edx
setle cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], dl
je 0x1001913a
push 0x393
push edx
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
xor edx, edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 6
je 0x100190bd
xor ecx, ecx
mov dword [ebp - 0x28], 0x5aba8b03
mov dword [ebp - 4], edx
inc ecx
jmp 0x10019164
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x44], 0x4800fa7
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10019156
mov dword [ebp - 4], edx
jmp 0x1001917b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x11c], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x1001916e
cmp dword [ebp - 0x2c], edx
je 0x1001918d
mov eax, ecx
cmp dword [ebp - 0x44], edx
jne 0x1001918f
mov eax, edx
cmp eax, dword [ebp - 0x38]
jg 0x10019197
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
dec eax
neg eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x40]
add eax, 0xe883
cmp eax, 0x3e8c
jle 0x100191cb
cmp dword [ebp - 0x20], edx
je 0x100191cb
mov edx, ecx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
add ecx, 0x190
je 0x100191e8
cmp dword [ebp - 0x20], 0
je 0x100191e8
xor ecx, ecx
inc ecx
jmp 0x100191ea
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
xor eax, eax
test ecx, ecx
sete al
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
dec dword [ebp - 0x118]
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x20]
imul ecx, eax
test ecx, ecx
jne 0x1001921a
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x44]
xor edx, edx
mov ecx, dword [ebp - 0x44]
imul ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
add ecx, 0xffff079f
cmp ecx, eax
setne dl
xor ecx, ecx
mov dword [ebp - 0x44], edx
inc ecx
xor edx, edx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1c], edx
jmp 0x10019255
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x12c], 0xf1124f01
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10019244
mov dword [ebp - 0x18], edx
jmp 0x100192ee
mov dword [ebp - 4], edx
jmp 0x10019275
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x70], 0x654fddd3
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10019267
mov dword [ebp - 4], edx
jmp 0x1001928d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x6c], 9
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001927f
mov dword [ebp - 0x70], edx
jmp 0x100192bc
mov dword [ebp - 8], 0x1449c9fb
mov dword [ebp - 8], edx
jmp 0x100192b4
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x12c], 0xb04800fa
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x100192a3
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], edx
jle 0x10019297
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], edx
jg 0x100192eb
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x100192e0
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
xor edx, edx
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], edx
jle 0x100192c9
xor ecx, ecx
inc ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x10019262
mov dword [ebp - 0x18], 3
cmp dword [ebx + 0x10], edx
jne 0x1001930a
xor al, al
jmp 0x1001a591
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x1c], edx
jmp 0x10019327
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa0], 0x24f01c08
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10019316
cmp dword [ebp - 0xa0], edx
je 0x10019352
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x1001946e
push edx
call edi
push eax
call dword [sym.imp.USER32.dll_SetMenu]
xor edx, edx
jmp 0x1001946e
mov dword [ebp - 8], ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x1c], edx
jmp 0x1001936e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x214], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001935d
mov dword [ebp - 8], edx
cmp dword [ebp - 8], edx
jg 0x1001946e
mov ebx, 0xd4e70302
mov dword [ebp - 4], 0x3f467215
mov dword [ebp - 0x38], 0x3cc25429
mov dword [ebp - 4], edx
cmp dword [ebp - 4], edx
jl 0x1001945f
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x1c], edx
jmp 0x100193bc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x184], 0x6d238e48
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100193ab
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x17c]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa0]
cmp ebx, eax
mov eax, dword [ebp - 4]
sbb esi, esi
xor edx, edx
inc esi
mov dword [ebp + eax*4 - 0xa0], esi
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x180], ecx
mov eax, dword [ebp - 8]
cmp ecx, eax
setge dl
xor eax, eax
add edx, dword [ebp - 4]
test esi, esi
sete al
imul edx, eax
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 0
je 0x10019433
cmp dword [ebp - 0x38], 0
je 0x10019433
xor eax, eax
inc eax
jmp 0x10019435
xor eax, eax
mov dword [ebp - 0x24], eax
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
push 0
setge dl
xor eax, eax
cmp eax, edx
pop edx
sbb eax, eax
neg eax
mov dword [ebp - 0x20c], eax
dec dword [ebp - 4]
jns 0x1001939f
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jle 0x10019385
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x80]
mov ecx, 0x61e7
mov dword [eax], edx
mov eax, 0x71e9942c
mov dword [ebp - 0xc], 0x31551da6
mov dword [ebp - 0x18], 0xfff6
mov dword [ebp - 4], 0xfffffff6
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x10], 0x131e
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
sub ecx, eax
je 0x100194d6
cmp dword [ebp - 4], edx
je 0x100194d6
xor esi, esi
inc esi
mov ecx, esi
jmp 0x100194db
xor esi, esi
mov ecx, edx
inc esi
mov eax, dword [ebp - 4]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
push 3
setle dl
xor ecx, ecx
sub edx, 5
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0x5d580090
mov eax, dword [ebp - 0xc]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0x9e62
setl al
imul eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
sub ecx, 0x1ef5c421
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
sub edx, eax
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x90]
add ecx, edx
xor edx, edx
cmp ecx, eax
pop ecx
setl dl
xor eax, eax
cmp edx, 0x8c5cecce
setne al
xor edx, edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], edx
jl 0x10019728
mov dword [ebp - 0x24], 0xa7da9fc5
mov dword [ebp - 0x1c], edx
jmp 0x1001959e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x144], 0xd14a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001958d
mov dword [ebp - 0x18], edx
jmp 0x10019716
mov dword [ebp - 0x20], 0x1021f5eb
mov dword [ebp - 0x1c], edx
jmp 0x100195c5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x100195b8
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], edx
jl 0x10019713
cmp dword [ebp - 0x20], edx
jne 0x100195ea
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x98], edx
jne 0x100195ea
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x98], esi
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
cmp eax, 0x4171b3fe
setl cl
cmp ecx, 0xd3b05e26
ja 0x10019646
cmp dword [ebp - 0x144], edx
jne 0x10019710
jmp 0x10019707
mov dword [ebp - 8], 0x106df3f1
xor edx, edx
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0xd4]
cmp ecx, eax
setg dl
mov dword [ebp - 0x20], edx
xor edx, edx
mov dword [ebp - 8], edx
cmp dword [ebp - 8], esi
jge 0x10019707
push 3
pop ecx
mov dword [ebp - 0x1c], edx
jmp 0x10019687
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x220], 0x1b866267
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10019676
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x98]
jne 0x1001969d
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x21c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x98]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xc], edx
jmp 0x100196f5
mov dword [ebp - 0x28], 0x237a
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x98]
neg eax
mov dword [ebp - 0x28], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x10
jne 0x100196dc
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10019671
dec dword [ebp - 0x10]
jns 0x100195d6
push 3
pop ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x100195ac
dec dword [ebp - 4]
jns 0x10019581
mov dword [ebp - 0xc], 0x44555950
mov dword [ebp - 8], 0x88dd0bb2
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jne 0x10019741
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
je 0x10019783
mov dword [ebp - 0x28], 0x814b
mov dword [ebp - 0x20], edx
xor edx, edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setle dl
mov dword [ebp - 0x20], edx
jmp 0x10019856
mov dword [ebp - 0x20], 0xf4a1d2da
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x10], edx
jmp 0x100197a7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x238], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10019796
mov dword [ebp - 0xc], 6
jmp 0x1001984c
mov dword [ebp - 4], 0x8c84060a
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
test eax, eax
je 0x100197cd
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 4], esi
je 0x100197f7
cmp dword [ebp - 0xc], edx
je 0x100197f7
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x100197f2
push edx
call edi
push eax
call dword [sym.imp.USER32.dll_EndPaint]
xor edx, edx
dec dword [ebp - 8]
jmp 0x10019846
mov dword [ebp - 4], edx
jmp 0x10019811
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x1001980e
push edx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
xor edx, edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x1c
jg 0x100197fc
mov dword [ebp - 4], edx
jmp 0x10019840
mov dword [ebp - 8], edx
jmp 0x10019837
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x10019834
push edx
push edx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor edx, edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jle 0x10019821
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x1001981c
inc dword [ebp - 0x24]
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x20
jge 0x100197b8
mov dword [ebp - 0x20], 9
xor edx, edx
mov dword [ebp - 8], edx
or esi, 0xffffffff
mov dword [ebp - 0x24], esi
xor ecx, ecx
mov eax, dword [ebp - 8]
inc ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0x25
jl 0x1001989b
mov dword [ebp - 0x24], esi
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x1001988f
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor edx, edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x25
jge 0x1001987a
xor ecx, ecx
inc ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x10], edx
jmp 0x100198b4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1a0], 0x329e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100198a3
cmp dword [ebp - 8], edx
je 0x100198e1
mov dword [ebp - 0x10], edx
jmp 0x100198d4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe8], 0xfb63
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100198c3
mov dword [ebp - 0xe8], esi
jmp 0x1001995e
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x24], 0x4f934f54
mov dword [ebp - 0x24], 0x23e93d0b
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0x17
jg 0x1001995e
mov dword [ebp - 0x2c], 2
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x1001991d
push 0x720
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 8]
cmp ecx, eax
setge dl
mov dword [ebp - 0x24], edx
xor edx, edx
cmp dword [ebp - 0x24], edx
jne 0x10019937
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x3c], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x17
jle 0x10019902
xor ecx, ecx
inc ecx
mov dword [ebp - 0x10], edx
jmp 0x10019974
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x9c], 0x24f01c08
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10019963
mov dword [ebp - 0x10], 0x76820624
mov dword [ebp - 4], edx
jmp 0x10019992
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x22c], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10019985
mov dword [ebp - 4], edx
jmp 0x100199aa
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xd0], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001999d
mov dword [ebp - 0x10], edx
jmp 0x100199c1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret