Function at 0x10003f90
Capabilities:
Check for unexpected memory writes
Create mailslot
Get graphical window text
Get hostname
Get keyboard layout
Hide graphical window
Manipulate console buffer

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
push esi
cmp dword [0x10040b04], 0x4d662ae5
jne 0x100041cd
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DiscardVirtualMemory]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemPreferredUILanguages]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x78], eax
push 0
mov ecx, dword [ebp - 0x78]
push ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadConsoleOutputCharacterW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
push 0
push 0x10068c1c
push 0
call dword [sym.imp.KERNEL32.dll_GetNLSVersionEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PowerClearRequest]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalHandle]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
push 0
call dword [sym.imp.USER32.dll_IsZoomed]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenFileById]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_OffsetRect]
push 0
call dword [sym.imp.USER32.dll_SetProcessWindowStation]
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x7c], edx
push 0
mov eax, dword [ebp - 0x7c]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputAttribute]
push 0
call dword [sym.imp.USER32.dll_UnregisterSuspendResumeNotification]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommTimeouts]
push 0
call dword [sym.imp.KERNEL32.dll_AttachConsole]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_AppendMenuW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadpoolTimer]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
push 0
call dword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
push 0
push 0x10068c48
push 0
call dword [sym.imp.KERNEL32.dll_GetNLSVersionEx]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.USER32.dll_GetWindowDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumLanguageGroupLocalesW]
call dword [sym.imp.KERNEL32.dll_UnregisterApplicationRestart]
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterHotKey]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesTransactedW]
push 0
call dword [sym.imp.USER32.dll_IsCharAlphaW]
push 0
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayoutList]
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetSystemPowerState]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMailslotW]
call dword [sym.imp.KERNEL32.dll_FlushProcessWriteBuffers]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetClipboardFormatNameW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push 0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_EnumDisplaySettingsW]
push 0
call dword [sym.imp.USER32.dll_RegisterClassExW]
push 0
push 0
call dword [sym.imp.USER32.dll_IsChild]
push 0x11d
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, 4
imul edx, ecx, 0x62
mov ecx, dword [0x1005f348]
mov dword [ecx + edx], eax
mov dword [ebp - 8], 0x2702
mov dword [ebp - 4], 0
mov dword [ebp - 0xc], 0xd0a
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000422b
mov edx, dword [ebp - 4]
sub edx, 0x22e1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x38], 0
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0xcf9
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x187a
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000428a
mov edx, dword [ebp - 0x38]
add edx, 0x148b
mov dword [ebp - 0x38], edx
jmp 0x10004295
mov eax, dword [ebp - 0x38]
sub eax, 0x148b
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100042b8
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x1000429e
mov eax, dword [ebp - 8]
sub eax, 0xa0b
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0xcaf
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x6d0
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, 4
imul eax, edx, 0x62
mov ecx, 4
imul edx, ecx, 0
mov ecx, dword [0x1005f348]
mov eax, dword [ecx + eax]
mov dword [edx + eax], 0x5e34fcfe
mov ecx, dword [ebp - 8]
and ecx, 0x80000003
jns 0x10004338
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x10004350
cmp dword [ebp - 8], 0
jle 0x10004350
mov edx, dword [ebp - 8]
add edx, 0xa33
mov dword [ebp - 8], edx
jmp 0x1000435b
mov eax, dword [ebp - 8]
sub eax, 0xa33
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x1f52
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, 0xf4c
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x937
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x201b
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, 0x206d
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x187d
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, 0x238a
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x2375
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100043f7
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x100043dd
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0xe72
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x1cc5
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, 0x22ea
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x296
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x111c
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x14ac
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, 0x7e2
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, 0xef7
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x19b
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, 0x1f69
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x1476
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x38]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, 0x26a5
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0xc84
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, 0x1a4f
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0xae1
mov dword [ebp - 4], ecx
mov dword [ebp - 0x44], 0
jmp 0x10004535
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x39
jge 0x10004546
mov eax, dword [ebp - 0xc]
sub eax, 6
mov dword [ebp - 0xc], eax
jmp 0x1000452c
mov ecx, dword [ebp - 8]
sub ecx, 0x1c98
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x1844
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x1fbb
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x1b74
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, 0x21d0
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0x21d5
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1170
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
and eax, 0x80000003
jns 0x100045cc
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x100045e4
cmp dword [ebp - 8], 0
jle 0x100045e4
mov ecx, dword [ebp - 8]
add ecx, 0x59e
mov dword [ebp - 8], ecx
jmp 0x100045f0
mov edx, dword [ebp - 8]
sub edx, 0x59e
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1d
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x54a
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, 0x1dc6
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x25b9
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, 0x5e0
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 0x2096
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x1536
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000001
jns 0x10004658
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000466d
cmp dword [ebp - 8], 0
jle 0x1000466d
mov eax, dword [ebp - 8]
add eax, 0xf46
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, 0x495
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x38]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x215e
mov dword [ebp - 8], ecx
mov dword [ebp - 0x48], 0
jmp 0x100046c4
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0x2a
jge 0x100046d5
mov eax, dword [ebp - 4]
add eax, 6
mov dword [ebp - 4], eax
jmp 0x100046bb
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x1fba
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x14d6
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000003
jns 0x1000470f
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x1000471e
mov eax, dword [ebp - 8]
add eax, 0x13c7
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, 4
imul eax, edx, 0x62
mov ecx, 4
shl ecx, 0
mov edx, dword [0x1005f348]
mov eax, dword [edx + eax]
mov dword [ecx + eax], 0x62d1b970
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0xd98
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0x1fc
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1d63
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0x5a2
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1f54
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
and edx, 0x80000001
jns 0x100047bf
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x100047ce
mov eax, dword [ebp - 4]
sub eax, 0x193d
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x2c2
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1279
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1345
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x2475
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x13d9
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1fdc
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10004853
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x10004839
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10004882
mov edx, dword [ebp - 8]
sub edx, 0x1bad
mov dword [ebp - 8], edx
jmp 0x1000488d
mov eax, dword [ebp - 8]
add eax, 0x1bad
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, 0x678
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0xf52
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x38]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x406
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x1d37
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x23f3
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x38]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x1d3b
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, 4
imul ecx, eax, 0x62
mov edx, 4
shl edx, 1
mov eax, dword [0x1005f348]
mov ecx, dword [eax + ecx]
mov dword [edx + ecx], 0xe1d84d6a
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x222c
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x15f9
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov dword [ebp - 0x4c], 0
jmp 0x10004998
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 0x5d
jge 0x100049a9
mov edx, dword [ebp - 4]
add edx, 5
mov dword [ebp - 4], edx
jmp 0x1000498f
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, 0x1949
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x23cd
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, 0x886
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x50], 0
jmp 0x10004a0a
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0x4f
jge 0x10004a1b
mov eax, dword [ebp - 0xc]
add eax, 6
mov dword [ebp - 0xc], eax
jmp 0x10004a01
mov ecx, dword [ebp - 4]
sub ecx, 0x17ce
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0x5e5
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, 0x318
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1f00
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
and edx, 0x80000001
jns 0x10004a76
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10004a8b
cmp dword [ebp - 0xc], 0
jle 0x10004a8b
mov eax, dword [ebp - 0xc]
sub eax, 0x2509
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, 0xb93
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0xa50
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x9c4
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0xcb6
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x856
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, 0x3dc
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0x267a
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0xf8b
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xff5
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x20ce
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10004b60
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10004b46
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
and ecx, 0x80000001
jns 0x10004b79
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10004b88
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x10004b69
mov eax, dword [ebp - 0xc]
sub eax, 0xac0
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x3ba
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, 0x2191
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x571
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x38]
mov dword [ebp - 4], edx
mov dword [ebp - 0x54], 0
jmp 0x10004bda
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x28
jge 0x10004beb
mov ecx, dword [ebp - 0x38]
add ecx, 6
mov dword [ebp - 0x38], ecx
jmp 0x10004bd1
mov edx, dword [ebp - 4]
sub edx, 0x2532
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
and eax, 0x80000001
jns 0x10004c06
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10004c18
mov ecx, dword [ebp - 0xc]
sub ecx, 0x2b3
mov dword [ebp - 0xc], ecx
jmp 0x10004c24
mov edx, dword [ebp - 0xc]
add edx, 0x2b3
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0xa23
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, 0x1509
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, 4
imul eax, edx, 0x62
mov ecx, 4
imul edx, ecx, 3
mov ecx, dword [0x1005f348]
mov eax, dword [ecx + eax]
mov dword [edx + eax], 0x6589b625
mov ecx, dword [ebp - 4]
add ecx, 0x1ef1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x1838
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, 0xc34
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0xbd3
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0xee3
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x80
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
cmp dword [0x10040b04], 0x4d662ae5
jne 0x10004eba
xor edx, edx
lock dec dword [edx]
push 0
call dword [sym.imp.USER32.dll_SetCaretBlinkTime]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeClientSessionId]
push 0
call dword [sym.imp.USER32.dll_GetTopWindow]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenThread]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetAltTabInfoW]
push 0
call dword [sym.imp.USER32.dll_SwitchDesktop]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetApplicationRecoveryCallback]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_FrameRect]
push 0
call dword [sym.imp.USER32.dll_IsHungAppWindow]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ResetWriteWatch]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileTime]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CheckTokenMembershipEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeClientSessionId]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DlgDirSelectComboBoxExW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
call dword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
push 0
push 0
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0x10068c80
push 0
push 0
push 0
push 0x10068c94
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetSystemFileCacheSize]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxIndirectParamW]
push 0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0
call dword [sym.imp.USER32.dll_GetThreadDesktop]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetUserObjectSecurity]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CascadeWindows]
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AllocateUserPhysicalPages]
push 0
push 0
call dword [sym.imp.USER32.dll_SetMenu]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetWriteWatch]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DdeClientTransaction]
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadId]
push 0
push 0
call dword [sym.imp.USER32.dll_RegisterSuspendResumeNotification]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetRawInputDeviceList]
push 0
push 0
call dword [sym.imp.USER32.dll_GetClassLongW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCriticalSectionSpinCount]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x20], 0x1670
mov eax, dword [ebp - 0x3c]
add eax, 0x13
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0x11aa
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0x1547
mov dword [ebp - 0x10], 0x1aa3
mov dword [ebp - 0x34], 0xc18
mov dword [ebp - 0x2c], 0x142a
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x19e
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], 0x231
mov eax, dword [ebp - 0x10]
add eax, 0x1da1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x28]
add ecx, 0xdf9
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x1c11
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x28]
add eax, 0x1173
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0xa66
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x20]
add edx, 0xe08
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x34]
sub ecx, 0x157
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0xef9
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x3c]
add ecx, 0xa
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x58], 0
jmp 0x10004fe3
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 0x62
jge 0x10004ff4
mov eax, dword [ebp - 0x34]
sub eax, 2
mov dword [ebp - 0x34], eax
jmp 0x10004fda
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], 0x152
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x10]
and edx, 0x80000003
jns 0x1000502f
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x10005046
cmp dword [ebp - 0x10], 0
jle 0x10005046
mov eax, dword [ebp - 0x10]
sub eax, 0x2344
mov dword [ebp - 0x10], eax
jmp 0x10005052
mov ecx, dword [ebp - 0x10]
add ecx, 0x2344
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
add eax, 0x105b
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x770
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x224d
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x5c], 0
jmp 0x100050ab
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x40
jge 0x100050bc
mov ecx, dword [ebp - 0x1c]
sub ecx, 9
mov dword [ebp - 0x1c], ecx
jmp 0x100050a2
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x4ee
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x3c]
add eax, 5
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x24e6
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x2ea
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x16b6
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
add eax, 0xaa
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x1048
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x30]
add edx, 0x1dd
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x18]
add eax, 0x15e5
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x1dea
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100051ae
mov edx, dword [ebp - 0x2c]
sub edx, 0x1088
mov dword [ebp - 0x2c], edx
jmp 0x100051b9
mov eax, dword [ebp - 0x2c]
add eax, 0x1088
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x1db2
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x30]
add eax, 0x1033
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1eb7
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x14]
and eax, 0x80000001
jns 0x10005217
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10005226
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
jmp 0x10005208
mov edx, dword [ebp - 0x30]
add edx, 0x90d
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x933
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x209b
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x763
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x1ce5
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x28]
add edx, 0xe84
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x2447
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x1f80
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x3c]
add edx, 0x18
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x30]
and eax, 0x80000003
jns 0x10005311
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x10005327
cmp dword [ebp - 0x30], 0
jle 0x10005327
mov ecx, dword [ebp - 0x30]
add ecx, 0xc22
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x34]
add edx, 0x101b
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x24]
add eax, 0x1b2a
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x1656
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x2c]
and edx, 0x80000003
jns 0x10005375
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x10005384
mov eax, dword [ebp - 0x2c]
add eax, 0x1cee
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x17bf
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x19b9
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x10]
add eax, 0x24ad
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100053db
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
jmp 0x100053c1
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x1e22
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x1623
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x1a9
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x22f
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x12c
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x1973
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x22ed
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x5fb
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10005467
mov edx, dword [ebp - 0x20]
sub edx, 0x98a
mov dword [ebp - 0x20], edx
jmp 0x10005472
mov eax, dword [ebp - 0x20]
add eax, 0x98a
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0xb8d
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x30]
add edx, 0xecb
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x14]
and edx, 0x80000001
jns 0x100054a9
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x100054b8
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
jmp 0x10005499
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x16a3
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
add eax, 0xf82
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x60], 0
jmp 0x1000550e
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0x49
jge 0x1000551f
mov eax, dword [ebp - 0x1c]
sub eax, 2
mov dword [ebp - 0x1c], eax
jmp 0x10005505
mov ecx, dword [ebp - 0x24]
sub ecx, 0x1b32
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10005546
mov edx, dword [ebp - 0x30]
sub edx, 0xaee
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x34]
sub edx, 0x224c
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x1016
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x182e
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x34]
sub edx, 0xafa
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x1d89
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x2641
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
add edx, 0x159
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x3c]
add eax, 3
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x177c
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x7af
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x515
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x64], 0
jmp 0x10005669
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x1d
jge 0x1000567a
mov ecx, dword [ebp - 0x20]
add ecx, 2
mov dword [ebp - 0x20], ecx
jmp 0x10005660
mov edx, dword [ebp - 0x2c]
sub edx, 0x2269
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x14]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100056a0
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x10005686
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x68], 0
jmp 0x100056bb
mov ecx, dword [ebp - 0x68]
add ecx, 1
mov dword [ebp - 0x68], ecx
cmp dword [ebp - 0x68], 0x53
jge 0x100056cc
mov edx, dword [ebp - 0x14]
sub edx, 9
mov dword [ebp - 0x14], edx
jmp 0x100056b2
mov eax, dword [ebp - 0x18]
sub eax, 0x1c8c
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x6c], 0
jmp 0x100056f2
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 0x17
jge 0x10005703
mov eax, dword [ebp - 0x10]
add eax, 8
mov dword [ebp - 0x10], eax
jmp 0x100056e9
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x70], 0
jmp 0x10005739
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 0x13
jge 0x1000574a
mov eax, dword [ebp - 0x24]
add eax, 5
mov dword [ebp - 0x24], eax
jmp 0x10005730
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x147c
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x24]
add eax, 0x1e49
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x2062
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x25e9
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
sub eax, 0xdbd
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x3ca
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x1ae
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100057c7
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x100057ad
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x74], 0
jmp 0x100057eb
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 0x44
jge 0x100057fc
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [ebp - 0x14], eax
jmp 0x100057e2
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1933
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x11df
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10005855
cmp dword [ebp - 0x14], 0
jle 0x10005855
mov edx, dword [ebp - 0x14]
sub edx, 0x2105
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
add eax, 0x1fad
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
and edx, 0x80000001
jns 0x10005879
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10005890
cmp dword [ebp - 0x10], 0
jle 0x10005890
mov eax, dword [ebp - 0x10]
add eax, 0xf08
mov dword [ebp - 0x10], eax
jmp 0x1000589c
mov ecx, dword [ebp - 0x10]
sub ecx, 0xf08
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x1c0c
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x2583
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 0x12e
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0xfab
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x267
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x34]
add eax, 0x1dbe
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x1c]
and edx, 0x80000001
jns 0x10005927
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10005936
mov eax, dword [ebp - 0x1c]
add eax, 0x191
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov eax, 4
imul ecx, eax, 0xd5
mov edx, dword [0x1005f348]
mov eax, dword [ebp - 0x3c]
mov dword [edx + ecx], eax
mov ecx, 4
imul edx, ecx, 0x62
mov eax, 4
shl eax, 1
mov ecx, dword [0x1005f348]
mov edx, dword [ecx + edx]
mov eax, dword [edx + eax]
add eax, 0xbed9a
mov ecx, 4
imul edx, ecx, 0x62
mov ecx, 4
shl ecx, 1
mov esi, dword [0x1005f348]
mov edx, dword [esi + edx]
mov dword [ecx + edx], eax
cmp dword [0x10040b04], 0x4d662ae5
jne 0x10005b52
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_RegisterPowerSettingNotification]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_AppendMenuW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
call dword [sym.imp.KERNEL32.dll_CreateThreadpoolCleanupGroup]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForThreadpoolTimerCallbacks]
push 0
push 0
call dword [sym.imp.USER32.dll_CallMsgFilterW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetCoalescableTimer]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstVolumeW]
push 0
push 0
call dword [sym.imp.USER32.dll_UpdateLayeredWindowIndirect]
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetClassInfoW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteTapemark]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetUpdatedClipboardFormats]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_IntersectRect]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetQueuedCompletionStatusEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeServerSessionId]
push 0
push 0
call dword [sym.imp.USER32.dll_ChangeWindowMessageFilter]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_UpdateResourceW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFileExNuma]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0
push 0
call dword [sym.imp.USER32.dll_EqualRect]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLogicalProcessorInformation]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_EnableScrollBar]
push 0
call dword [sym.imp.USER32.dll_CharLowerW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LockFile]
push 0
call dword [sym.imp.KERNEL32.dll_DisableThreadProfiling]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFinalPathNameByHandleW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
pop esi
mov esp, ebp
pop ebp
ret