Function at 0x10002840
Capabilities:
Create directory
Enumerate gui resources
Get common file path
Get graphical window text
Get memory capacity
Open clipboard
Read .ini file
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [0x10062ed0], 0
mov eax, dword [0x10062ecc]
xor ecx, ecx
mov dword [ebp - 8], eax
mov dword [ebp - 4], ecx
cmp dword [ebp - 8], 0x9ab95b73
jne 0x100029d1
cmp dword [ebp - 4], 0
jne 0x100029d1
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DdePostAdvise]
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCIDToLocaleName]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetStdHandle]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThreadpoolWait]
push 0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
push 0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GlobalGetAtomNameW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
push 0
call dword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
push 0
push 0
push 0x100696f4
push 0
push 0x10069714
call dword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLocaleName]
push 0
push 0
call dword [sym.imp.USER32.dll_SetClipboardData]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadErrorMode]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphoreWhenCallbackReturns]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddScopedPolicyIDAce]
push 0
call dword [sym.imp.KERNEL32.dll_AcquireSRWLockShared]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExW]
push 0
call dword [sym.imp.USER32.dll_OpenClipboard]
push 0
push 0
call dword [sym.imp.USER32.dll_RegisterSuspendResumeNotification]
push 0
call dword [sym.imp.USER32.dll_SetDisplayAutoRotationPreferences]
push 0
push 0x10069750
call dword [sym.imp.KERNEL32.dll_LoadModule]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_PrintWindow]
push 0
push 0
call dword [sym.imp.USER32.dll_GetClientRect]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitCommEvent]
push 0
call dword [sym.imp.USER32.dll_InSendMessageEx]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDllDirectory]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_IntersectRect]
mov ecx, dword [ebp + 8]
call fcn.100089e0
movzx edx, al
test edx, edx
jne 0x10002ce0
mov ecx, dword [ebp + 8]
call fcn.10008810
mov ecx, dword [0x10062ed0]
add ecx, dword [eax]
mov dword [0x10062ed0], ecx
cmp dword [0x10062ecc], 0x54baeb05
jne 0x10002b30
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeServerProcessId]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CreateIconFromResourceEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileIoOverlappedRange]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]
mov ecx, dword [ebp + 8]
call fcn.10008990
mov edx, dword [0x10062ecc]
xor eax, eax
mov dword [ebp - 0x10], edx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x10], 0xca6a9089
jne 0x10002cdb
cmp dword [ebp - 0xc], 0
jne 0x10002cdb
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterHotKey]
push 0
call dword [sym.imp.KERNEL32.dll_GetNumberOfConsoleMouseButtons]
push 0
push 0
call dword [sym.imp.USER32.dll_WaitForInputIdle]
push 0
push 0
call dword [sym.imp.USER32.dll_DrawFocusRect]
xor ecx, ecx
xor edx, edx
xor eax, eax
lock cmpxchg dword [edx], ecx
push 0
call dword [sym.imp.USER32.dll_ArrangeIconicWindows]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DlgDirListW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetScrollInfo]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ScrollWindowEx]
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLCID]
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddIntegrityLabelToBoundaryDescriptor]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetUserObjectInformationW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenThread]
push 0
call dword [sym.imp.USER32.dll_GetThreadDesktop]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DdeCreateDataHandle]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CascadeWindows]
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0
call dword [sym.imp.USER32.dll_IsCharUpperW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
push 0
call dword [sym.imp.KERNEL32.dll_WakeAllConditionVariable]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetClassLongW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextVolumeW]
jmp 0x100029d1
mov esp, ebp
pop ebp
ret