Function at 0x10008120
Capabilities:
Link many functions at runtime

Disassembly:
push esi
push edi
push 0x1001f854
call fcn.10007d30
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 4
mov edi, eax
push str.LoadLibraryA
push edi
call esi
push str.CancelIo
push edi
mov dword [0x10022778], eax
call esi
push str.SetErrorMode
push edi
mov dword [0x1002280c], eax
call esi
push str.DeviceIoControl
push edi
mov dword [0x1002258c], eax
call esi
push str.CreateRemoteThread
push edi
mov dword [0x10022710], eax
call esi
push str.OpenProcess
push edi
mov dword [0x10022594], eax
call esi
push str.WriteProcessMemory
push edi
mov dword [0x10022504], eax
call esi
push str.CreatePipe
push edi
mov dword [0x10022728], eax
call esi
push str.CreateEventA
push edi
mov dword [0x100226a0], eax
call esi
push str.CreateDirectoryA
push edi
mov dword [0x100224d8], eax
call esi
push str.CreateMutexA
push edi
mov dword [0x100225fc], eax
call esi
push str.CreateProcessA
push edi
mov dword [0x10022598], eax
call esi
push str.CreateThread
push edi
mov dword [0x1002276c], eax
call esi
push str.CreateToolhelp32Snapshot
push edi
mov dword [0x10022688], eax
call esi
push str.DeleteCriticalSection
push edi
mov dword [0x10022488], eax
call esi
push str.DeleteFileA
push edi
mov dword [0x10022478], eax
call esi
push str.DisconnectNamedPipe
push edi
mov dword [0x1002263c], eax
call esi
push str.EnterCriticalSection
push edi
mov dword [0x100224b0], eax
call esi
push str.TerminateThread
mov dword [0x10022540], eax
push edi
call esi
push str.FindClose
push edi
mov dword [0x10022524], eax
call esi
push str.FindFirstFileA
push edi
mov dword [0x100226c4], eax
call esi
push str.FindNextFileA
push edi
mov dword [0x10022740], eax
call esi
push str.FindResourceA
push edi
mov dword [0x10022590], eax
call esi
push str.GetStartupInfoA
push edi
mov dword [0x10022770], eax
call esi
push str.GetWindowsDirectoryA
push edi
mov dword [0x10022628], eax
call esi
push str.LoadResource
push edi
mov dword [0x10022580], eax
call esi
push str.OpenEventA
push edi
mov dword [0x10022530], eax
call esi
push str.PeekNamedPipe
push edi
mov dword [0x100225d0], eax
call esi
push str.Process32First
push edi
mov dword [0x10022640], eax
call esi
push str.Process32Next
push edi
mov dword [0x10022748], eax
call esi
push str.ReadFile
push edi
mov dword [0x10022734], eax
call esi
push str.ReleaseMutex
push edi
mov dword [0x10022630], eax
call esi
push str.RemoveDirectoryA
push edi
mov dword [0x100225c4], eax
call esi
push str.ResetEvent
push edi
mov dword [0x100224f0], eax
call esi
push str.SetEvent
push edi
mov dword [0x10022650], eax
call esi
push str.SizeofResource
push edi
mov dword [0x1002265c], eax
call esi
push str.WaitForMultipleObjects
push edi
mov dword [0x1002254c], eax
call esi
push str.UnmapViewOfFile
push edi
mov dword [0x1002257c], eax
call esi
push str.WaitForSingleObject
push edi
mov dword [0x100226a4], eax
call esi
push str.WriteFile
push edi
mov dword [0x10022498], eax
call esi
push str.SetFileAttributesA
push edi
mov dword [0x10022818], eax
call esi
push str.SetFilePointer
push edi
mov dword [0x100225e4], eax
call esi
push str.CopyFileA
push edi
mov dword [0x100226ec], eax
call esi
push str.MoveFileA
push edi
mov dword [0x100226f0], eax
call esi
push str.MoveFileExA
push edi
mov dword [0x10022758], eax
call esi
push str.ReplaceFileA
push edi
mov dword [0x10022660], eax
call esi
push str.GetFileTime
push edi
mov dword [0x10022684], eax
call esi
push str.SetFileTime
push edi
mov dword [0x10022698], eax
call esi
push str.CreateFileA
push edi
mov dword [0x1002275c], eax
call esi
push str.GetFileAttributesA
push edi
mov dword [0x100225b0], eax
call esi
push str.GetFileSize
push edi
mov dword [0x1002255c], eax
call esi
push str.IsDebuggerPresent
push edi
mov dword [0x1002268c], eax
call esi
push str.TerminateProcess
push edi
mov dword [0x100225c0], eax
call esi
push str.user32.dll
mov dword [0x100225e8], eax
call fcn.10007d30
add esp, 4
mov edi, eax
push str.BlockInput
push edi
call esi
push str.CallNextHookEx
push edi
mov dword [0x10022568], eax
call esi
push str.CharNextA
push edi
mov dword [0x10022620], eax
call esi
push str.CloseClipboard
push edi
mov dword [0x1002264c], eax
call esi
push str.CloseDesktop
push edi
mov dword [0x100224c4], eax
call esi
mov dword [0x100226d4], eax
push str.CloseWindow
push edi
call esi
push str.CreateWindowExA
push edi
mov dword [0x1002271c], eax
call esi
push str.DestroyCursor
push edi
mov dword [0x100224a8], eax
call esi
push str.DispatchMessageA
push edi
mov dword [0x1002251c], eax
call esi
push str.EmptyClipboard
push edi
mov dword [0x100225f8], eax
call esi
push str.EnumWindows
push edi
mov dword [0x10022668], eax
call esi
push str.ExitWindowsEx
push edi
mov dword [0x10022738], eax
call esi
push str.GetActiveWindow
push edi
mov dword [0x1002259c], eax
call esi
push str.GetClipboardData
push edi
mov dword [0x10022570], eax
call esi
push str.GetCursorInfo
push edi
mov dword [0x100226e0], eax
call esi
push str.GetCursorPos
push edi
mov dword [0x10022490], eax
call esi
push str.GetDC
push edi
mov dword [0x10022730], eax
call esi
push str.GetDesktopWindow
push edi
mov dword [0x10022768], eax
call esi
push str.GetKeyNameTextA
push edi
mov dword [0x100226e4], eax
call esi
push str.GetMessageA
push edi
mov dword [0x10022670], eax
call esi
push str.GetProcessWindowStation
push edi
mov dword [0x100225b4], eax
call esi
push str.GetSystemMetrics
push edi
mov dword [0x100226d0], eax
call esi
push str.GetThreadDesktop
push edi
mov dword [0x100226e8], eax
call esi
push str.GetUserObjectInformationA
push edi
mov dword [0x100224e4], eax
call esi
push str.GetWindowTextA
push edi
mov dword [0x100224b8], eax
call esi
mov dword [0x1002249c], eax
push str.GetWindowThreadProcessId
push edi
call esi
push str.IsWindow
push edi
mov dword [0x100225f4], eax
call esi
push str.IsWindowVisible
push edi
mov dword [0x10022644], eax
call esi
push str.LoadCursorA
push edi
mov dword [0x1002248c], eax
call esi
push str.MapVirtualKeyA
push edi
mov dword [0x10022584], eax
call esi
push str.OpenClipboard
push edi
mov dword [0x10022538], eax
call esi
push str.OpenDesktopA
push edi
mov dword [0x1002274c], eax
call esi
push str.OpenInputDesktop
push edi
mov dword [0x1002269c], eax
call esi
push str.OpenWindowStationA
push edi
mov dword [0x100226b4], eax
call esi
push str.PostMessageA
push edi
mov dword [0x1002253c], eax
call esi
push str.ReleaseDC
push edi
mov dword [0x10022500], eax
call esi
push str.SendMessageA
push edi
mov dword [0x10022654], eax
call esi
push str.SetCapture
push edi
mov dword [0x10022558], eax
call esi
push str.SetClipboardData
push edi
mov dword [0x1002260c], eax
call esi
push str.SetCursorPos
push edi
mov dword [0x10022600], eax
call esi
push str.SetProcessWindowStation
push edi
mov dword [0x10022624], eax
call esi
push str.SetRect
push edi
mov dword [0x100226dc], eax
call esi
push str.SetThreadDesktop
push edi
mov dword [0x100224bc], eax
call esi
push str.SetWindowsHookExA
push edi
mov dword [0x10022634], eax
call esi
push str.SystemParametersInfoA
push edi
mov dword [0x10022484], eax
call esi
push str.TranslateMessage
mov dword [0x10022528], eax
push edi
call esi
push str.UnhookWindowsHookEx
push edi
mov dword [0x10022474], eax
call esi
push str.WindowFromPoint
push edi
mov dword [0x100224c0], eax
call esi
push str.keybd_event
push edi
mov dword [0x100224a4], eax
call esi
push str.mouse_event
push edi
mov dword [0x100224d0], eax
call esi
push str.advapi32.dll
mov dword [0x100225e0], eax
call fcn.10007d30
add esp, 4
mov edi, eax
call fcn.10008010
push str.ControlService
push edi
call esi
push str.DeleteService
push edi
mov dword [0x1002270c], eax
call esi
push str.OpenSCManagerA
push edi
mov dword [0x100225a4], eax
call esi
push str.OpenServiceA
push edi
mov dword [0x1002247c], eax
call esi
push str.ClearEventLogA
push edi
mov dword [0x10022518], eax
call esi
push str.CloseEventLog
push edi
mov dword [0x10022510], eax
call esi
push str.CloseServiceHandle
push edi
mov dword [0x10022658], eax
call esi
push str.OpenEventLogA
push edi
mov dword [0x10022508], eax
call esi
push str.OpenProcessToken
push edi
mov dword [0x10022588], eax
call esi
push str.QueryServiceStatus
push edi
mov dword [0x10022548], eax
call esi
push str.RegCloseKey
push edi
mov dword [0x10022704], eax
call esi
push str.RegCreateKeyA
push edi
mov dword [0x10022618], eax
call esi
push str.RegCreateKeyExA
push edi
mov dword [0x10022534], eax
call esi
push str.RegDeleteKeyA
push edi
mov dword [0x10022664], eax
call esi
push str.RegDeleteValueA
mov dword [0x10022774], eax
push edi
call esi
push str.RegEnumKeyExA
push edi
mov dword [0x1002250c], eax
call esi
push str.RegEnumValueA
push edi
mov dword [0x10022604], eax
call esi
push str.RegOpenKeyA
push edi
mov dword [0x100226ac], eax
call esi
push str.RegOpenKeyExA
push edi
mov dword [0x100226f8], eax
call esi
push str.RegQueryValueA
push edi
mov dword [0x100224cc], eax
call esi
push str.RegQueryValueExA
push edi
mov dword [0x10022638], eax
call esi
push str.RegSetValueExA
push edi
mov dword [0x1002252c], eax
call esi
push str.RegisterServiceCtrlHandlerA
push edi
mov dword [0x10022700], eax
call esi
push str.SetServiceStatus
push edi
mov dword [0x100224e8], eax
call esi
push str.ChangeServiceConfigA
push edi
mov dword [0x100226b8], eax
call esi
push str.ChangeServiceConfig2A
push edi
mov dword [0x1002283c], eax
call esi
push str.EnumServicesStatusA
push edi
mov dword [0x10022840], eax
call esi
push str.QueryServiceConfig2A
push edi
mov dword [0x10022844], eax
call esi
push str.QueryServiceConfigA
push edi
mov dword [0x10022848], eax
call esi
push str.CreateProcessAsUserA
push edi
mov dword [0x1002284c], eax
call esi
push str.DuplicateTokenEx
push edi
mov dword [0x10022850], eax
call esi
push str.RegSetKeySecurity
push edi
mov dword [0x10022854], eax
call esi
push str.StartServiceA
push edi
mov dword [0x10022858], eax
call esi
push str.RegQueryInfoKeyA
push edi
mov dword [0x1002285c], eax
call esi
push str.RegNotifyChangeKeyValue
push edi
mov dword [0x10022860], eax
call esi
pop edi
mov dword [0x10022864], eax
pop esi
ret