Function at 0x10003c90
Capabilities:
Check for unexpected memory writes
Copy file
Delete directory
Log keystrokes via polling
Read clipboard data
Register raw input devices

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
push esi
cmp dword [0x10037b08], 0x4d662ae5
jne 0x10003e09
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitOnceExecuteOnce]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateTapePartition]
push 0
call dword [sym.imp.USER32.dll_IsHungAppWindow]
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_EnumPropsExW]
push 0
call dword [sym.imp.USER32.dll_SetProcessRestrictionExemption]
push 0
push 0
call dword [sym.imp.USER32.dll_GetIconInfo]
push 0
call dword [sym.imp.USER32.dll_GetThreadDesktop]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ChangeDisplaySettingsExW]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CopyFileTransactedW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSymbolicLinkTransactedW]
push 0
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_OpenWindowStationW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FlushViewOfFile]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0
push 0
call dword [sym.imp.USER32.dll_CharToOemW]
push 0
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateJobObject]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_RegisterRawInputDevices]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateJobObjectW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_FrameRect]
push 0
call dword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
push 0
call dword [sym.imp.USER32.dll_ClipCursor]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeServerSessionId]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaNodeProcessorMask]
push 0x11d
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, 4
imul edx, ecx, 0xd6
mov ecx, dword [0x10087b48]
mov dword [ecx + edx], eax
mov dword [ebp - 0x2c], 0x4f5
mov dword [ebp - 0x4c], 0
mov edx, dword [ebp - 0x2c]
add edx, 0xc81
mov dword [ebp - 0x2c], edx
mov eax, 4
imul ecx, eax, 0xd6
mov edx, 4
imul eax, edx, 0
mov edx, dword [0x10087b48]
mov ecx, dword [edx + ecx]
mov dword [eax + ecx], 0x54ec81ff
mov dword [ebp - 0x20], 0
mov edx, dword [ebp - 0x20]
add edx, 0xbcb
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x3c], 0x20bd
mov dword [ebp - 0x48], 0x20a5
mov eax, dword [ebp - 0x48]
sub eax, 0x2251
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x12ee
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x24], 0
mov edx, dword [ebp - 0x48]
add edx, 0x761
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003eda
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
jmp 0x10003ec0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], 0
mov ecx, dword [ebp - 0x40]
and ecx, 0x80000001
jns 0x10003efa
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10003f09
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
jmp 0x10003eea
mov eax, dword [ebp - 0x2c]
add eax, 0xc5a
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
mov ecx, 4
imul edx, ecx, 0xd6
mov eax, 4
shl eax, 0
mov ecx, dword [0x10087b48]
mov edx, dword [ecx + edx]
mov dword [eax + edx], 0x6660d207
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x4c]
sub ecx, 0xb6d
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0x451
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, 0xbd1
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x60], 0
mov ecx, dword [ebp - 0x44]
add ecx, 0x2235
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0x262b
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x44]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x3c]
add eax, 0x193
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x44]
sub ecx, 0x26ee
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x1684
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x163e
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x48]
sub edx, 0x18c6
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x24]
add eax, 0x42c
mov dword [ebp - 0x24], eax
mov ecx, 4
imul edx, ecx, 0xd6
mov eax, 4
shl eax, 1
mov ecx, dword [0x10087b48]
mov edx, dword [ecx + edx]
mov dword [eax + edx], 0x63637eb9
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10004066
cmp dword [ebp - 0x24], 0
jle 0x10004066
mov edx, dword [ebp - 0x24]
add edx, 0x121e
mov dword [ebp - 0x24], edx
jmp 0x10004071
mov eax, dword [ebp - 0x24]
sub eax, 0x121e
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x48]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10004094
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
jmp 0x1000407a
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x30d
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x12db
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x3c]
add eax, 0x26a9
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x4c]
sub edx, dword [ebp - 0x60]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], edx
mov eax, 4
imul ecx, eax, 0xd6
mov edx, 4
imul eax, edx, 3
mov edx, dword [0x10087b48]
mov ecx, dword [edx + ecx]
mov dword [eax + ecx], 0xdab354bf
cmp dword [0x10037b08], 0x4d662ae5
jne 0x1000435f
push 0
call dword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], eax
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x6c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
push 0
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
push 0
call dword [sym.imp.USER32.dll_GetProcessDefaultLayout]
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowLongW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetScrollBarInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InterlockedPushListSListEx]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GrayStringW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextVolumeW]
call dword [sym.imp.USER32.dll_GetMenuCheckMarkDimensions]
push 0
push 0
call dword [sym.imp.USER32.dll_EqualRect]
push 0
call dword [sym.imp.USER32.dll_GetClipboardData]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ReuseDDElParam]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_OpenWindowStationW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeW]
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
call dword [sym.imp.USER32.dll_SetProcessDPIAware]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_TrackPopupMenu]
push 0
call dword [sym.imp.USER32.dll_DdeImpersonateClient]
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
push 0
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingNumaW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileShortNameW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DrawTextExW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameTransactedW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetClassInfoExW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileIoOverlappedRange]
push 0
call dword [sym.imp.KERNEL32.dll_GetTapeStatus]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetWriteWatch]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphoreWhenCallbackReturns]
push 0
push 0
call dword [sym.imp.USER32.dll_EndPaint]
push 0
call dword [sym.imp.KERNEL32.dll_SubmitThreadpoolWork]
push 0
push 0x10090aa0
push 0x10090ab4
push 0
call dword [sym.imp.USER32.dll_CharPrevExA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaNodeProcessorMask]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Wow64SetThreadContext]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0
call dword [sym.imp.USER32.dll_LoadMenuIndirectW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EraseTape]
push 0
call dword [sym.imp.USER32.dll_OpenIcon]
push 0
call dword [sym.imp.USER32.dll_RegisterClassExW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenThread]
push 0
call dword [sym.imp.USER32.dll_DdeUninitialize]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForThreadpoolWorkCallbacks]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc], 0xb29
mov eax, dword [ebp - 0x1c]
add eax, 0x13
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x38], 0x1dc1
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x28], 0x928
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x18], 0x259
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x1ea8
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], 0xd0a
mov dword [ebp - 0x34], 0x11ae
mov edx, dword [ebp - 0x1c]
add edx, 0xa
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 8], eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 4], 0xe72
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x28]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
and eax, 0x80000003
jns 0x1000440f
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x10004421
mov ecx, dword [ebp - 0xc]
sub ecx, 0x180a
mov dword [ebp - 0xc], ecx
jmp 0x1000442d
mov edx, dword [ebp - 0xc]
add edx, 0x180a
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, 0x1175
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 8]
sub edx, 0x2334
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 5
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0xba3
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x3c1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x117c
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x21cd
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x24f6
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x30]
add edx, 0xeaf
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x64], 0
mov ecx, dword [ebp - 4]
add ecx, 0x23ac
mov dword [ebp - 4], ecx
mov dword [ebp - 0x50], 0
jmp 0x100044f7
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0x1a
jge 0x10004508
mov eax, dword [ebp - 4]
add eax, 2
mov dword [ebp - 4], eax
jmp 0x100044ee
mov ecx, dword [ebp - 0xc]
add ecx, 0x1cd9
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x23ef
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x22a1
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x30]
add eax, 0xc3a
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x61b
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x14]
add eax, 0x5b2
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1f57
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1b3e
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x2271
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x158f
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0x1f92
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x155f
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x28]
add edx, 0xf5
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x54], 0
jmp 0x100045f2
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x17
jge 0x10004603
mov ecx, dword [ebp - 0x18]
sub ecx, 4
mov dword [ebp - 0x18], ecx
jmp 0x100045e9
mov edx, dword [ebp - 0x10]
sub edx, 0x1da1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
sub eax, 0x1d54
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x18]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10004634
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
jmp 0x1000461a
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 8]
add edx, 0x4ac
mov dword [ebp - 8], edx
mov dword [ebp - 0x58], 0
jmp 0x10004664
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x38
jge 0x10004675
mov ecx, dword [ebp - 0x28]
add ecx, 9
mov dword [ebp - 0x28], ecx
jmp 0x1000465b
mov edx, dword [ebp - 0x18]
add edx, 0xa94
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1bf3
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
sub edx, 0x1c69
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x18]
add eax, 0x106f
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x1a48
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x5c], 0
jmp 0x100046d1
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x33
jge 0x100046e2
mov ecx, dword [ebp - 4]
sub ecx, 5
mov dword [ebp - 4], ecx
jmp 0x100046c8
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, 0xbd1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10004710
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x100046f6
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x1327
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
add eax, 0x16c3
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x1c]
add edx, 3
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x215d
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x1f88
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, 0x2525
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0xaa1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 8]
add ecx, 0x5e3
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x34]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x21f7
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
and edx, 0x80000001
jns 0x100047e9
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x100047f8
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x100047d9
mov ecx, dword [ebp - 4]
add ecx, 0x23c
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x18]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x2533
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x1cb7
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x12a7
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
sub eax, 0x1e16
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 8]
add ecx, 0xb44
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x2066
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x1000487a
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10004889
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
jmp 0x1000486b
mov edx, dword [ebp - 0xc]
add edx, 0x23df
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x28]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x815
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
add edx, 0xebf
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x38]
add eax, 0x2114
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, 4
imul eax, edx, 0x82
mov ecx, dword [0x10087b48]
mov edx, dword [ebp - 0x1c]
mov dword [ecx + eax], edx
mov eax, 4
imul ecx, eax, 0xd6
mov edx, 4
shl edx, 1
mov eax, dword [0x10087b48]
mov ecx, dword [eax + ecx]
mov edx, dword [ecx + edx]
add edx, 0x92cc1
mov eax, 4
imul ecx, eax, 0xd6
mov eax, 4
shl eax, 1
mov esi, dword [0x10087b48]
mov ecx, dword [esi + ecx]
mov dword [eax + ecx], edx
cmp dword [0x10037b08], 0x4d662ae5
jne 0x10004ade
push 0
push 0
push 0x10090ac8
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDurationFormat]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CloseThreadpoolCleanupGroupMembers]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaProcessorNodeEx]
push 0
push 0
call dword [sym.imp.USER32.dll_DdeQueryNextServer]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
push 0
push 0
call dword [sym.imp.USER32.dll_ScreenToClient]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetClassInfoW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadStringPtrW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_EnumPropsExW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddSIDToBoundaryDescriptor]
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowInfo]
push 0
call dword [sym.imp.USER32.dll_IsGUIThread]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryProcessCycleTime]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLogicalProcessorInformationEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddVectoredContinueHandler]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileNameW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TzSpecificLocalTimeToSystemTime]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommTimeouts]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReOpenFile]
push 0
push 0
push 0
push 0
push 0x10090afc
push 0
push 0x10090b28
push 0
push 0x10090b54
call dword [sym.imp.KERNEL32.dll_CompareStringEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNLSVersion]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CheckNameLegalDOS8Dot3W]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
push 0
call dword [sym.imp.USER32.dll_GetKeyState]
push 0
call dword [sym.imp.USER32.dll_GetThreadDesktop]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetApplicationRestartSettings]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
call dword [sym.imp.USER32.dll_GetFocus]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateJobObject]
push 0
call dword [sym.imp.USER32.dll_UnregisterDeviceNotification]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProtectedPolicy]
pop esi
mov esp, ebp
pop ebp
ret