Function at 0x140085840
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x838
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x820], rax
mov eax, dword [0x14051ed30]
test eax, eax
jne 0x140087d2f
cmp qword [0x14051ed38], 0
mov qword [rsp + 0x830], rbx
jne 0x140085a22
lea rcx, str.winmm.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov qword [0x14051ed38], rax
lea rdx, str.timeSetEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.timeKillEvent
mov qword [0x14051ed40], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.timeBeginPeriod
mov qword [0x14051ed48], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.timeEndPeriod
mov qword [0x14051ed50], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.timeGetTime
mov qword [0x14051ed58], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.timeGetDevCaps
mov qword [0x14051ed60], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.joyGetPosEx
mov qword [0x14051ed68], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.joyGetDevCapsW
mov qword [0x14051ed70], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.mciSendCommandW
mov qword [0x14051ed78], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.waveOutOpen
mov qword [0x14051ed80], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.waveOutClose
mov qword [0x14051ed88], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.waveOutPrepareHeader
mov qword [0x14051ed90], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.waveOutUnprepareHeader
mov qword [0x14051ed98], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.waveOutWrite
mov qword [0x14051eda0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051ed38]
lea rdx, str.waveOutReset
mov qword [0x14051eda8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051edb0], rax
cmp qword [0x14051edb8], 0
jne 0x1400863be
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov qword [0x14051edb8], rax
lea rdx, str.GetModuleHandleA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135b70]
mov qword [0x14051edc0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.VerifyVersionInfoA
mov qword [0x14051edc8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.VerifyVersionInfoW
mov qword [0x14051edd0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.VerSetConditionMask
mov qword [0x14051edd8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.CreateEventA
mov qword [0x14051ede0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.SetEvent
mov qword [0x14051ede8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.ResetEvent
mov qword [0x14051edf0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.CreateThread
mov qword [0x14051edf8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.SetThreadPriority
mov qword [0x14051ee00], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetThreadPriority
mov qword [0x14051ee08], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.ExitThread
mov qword [0x14051ee10], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetExitCodeThread
mov qword [0x14051ee18], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetCurrentThread
mov qword [0x14051ee20], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135c80]
mov qword [0x14051ee28], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.SuspendThread
mov qword [0x14051ee30], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.ResumeThread
mov qword [0x14051ee38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.WaitForSingleObject
mov qword [0x14051ee40], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.WaitForMultipleObjects
mov qword [0x14051ee48], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135ce8]
mov qword [0x14051ee50], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135cf8]
mov qword [0x14051ee58], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135d08]
mov qword [0x14051ee60], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.VirtualAlloc
mov qword [0x14051ee68], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.VirtualFree
mov qword [0x14051ee70], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.VirtualQuery
mov qword [0x14051ee78], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GlobalAlloc
mov qword [0x14051ee80], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GlobalFree
mov qword [0x14051ee88], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GlobalLock
mov qword [0x14051ee90], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GlobalUnlock
mov qword [0x14051ee98], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GlobalSize
mov qword [0x14051eea0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.CreateSemaphoreA
mov qword [0x14051eea8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.ReleaseSemaphore
mov qword [0x14051eeb0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetVersionExA
mov qword [0x14051eeb8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetVersionExW
mov qword [0x14051eec0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetSystemInfo
mov qword [0x14051eec8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.lstrlenA
mov qword [0x14051eed0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.lstrlenW
mov qword [0x14051eed8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.lstrcmpA
mov qword [0x14051eee0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.lstrcmpW
mov qword [0x14051eee8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.lstrcpyA
mov qword [0x14051eef0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135e48]
mov qword [0x14051eef8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.lstrcpynA
mov qword [0x14051ef00], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.lstrcpynW
mov qword [0x14051ef08], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetTickCount
mov qword [0x14051ef10], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135e88]
mov qword [0x14051ef18], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.QueryPerformanceFrequency
mov qword [0x14051ef20], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135ec0]
mov qword [0x14051ef28], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetTempPathA
mov qword [0x14051ef30], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetTempPathW
mov qword [0x14051ef38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetTempFileNameA
mov qword [0x14051ef40], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetTempFileNameW
mov qword [0x14051ef48], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.CreateFileA
mov qword [0x14051ef50], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135f30]
mov qword [0x14051ef58], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.DeleteFileA
mov qword [0x14051ef60], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.DeleteFileW
mov qword [0x14051ef68], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetFileSize
mov qword [0x14051ef70], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135f70]
mov qword [0x14051ef78], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135f80]
mov qword [0x14051ef80], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.SetFilePointer
mov qword [0x14051ef88], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.FindFirstFileA
mov qword [0x14051ef90], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051ef98], rax
mov rcx, qword [0x14051edb8]
lea rdx, str.FindFirstFileW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.FindNextFileA
mov qword [0x14051efa0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135fd0]
mov qword [0x14051efa8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140135fe0]
mov qword [0x14051efb0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.SetCurrentDirectoryA
mov qword [0x14051efb8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.SetCurrentDirectoryW
mov qword [0x14051efc0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetCurrentDirectoryA
mov qword [0x14051efc8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140136038]
mov qword [0x14051efd0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.Sleep
mov qword [0x14051efd8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.InitializeCriticalSection
mov qword [0x14051efe0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140136078]
mov qword [0x14051efe8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140136090]
mov qword [0x14051eff0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x1401360a8]
mov qword [0x14051eff8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x1401360c0]
mov qword [0x14051f000], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.LoadResource
mov qword [0x14051f008], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.FindResourceA
mov qword [0x14051f010], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.FindResourceW
mov qword [0x14051f018], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.LockResource
mov qword [0x14051f020], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.SizeofResource
mov qword [0x14051f028], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x140136120]
mov qword [0x14051f030], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f038], rax
lea rdx, str.OutputDebugStringA
mov rcx, qword [0x14051edb8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.OutputDebugStringW
mov qword [0x14051f040], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GlobalMemoryStatus
mov qword [0x14051f048], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.MulDiv
mov qword [0x14051f050], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetLocalTime
mov qword [0x14051f058], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.GetSystemPowerStatus
mov qword [0x14051f060], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.FileTimeToLocalFileTime
mov qword [0x14051f068], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, str.FileTimeToSystemTime
mov qword [0x14051f070], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x1401361d8]
mov qword [0x14051f078], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051edb8]
lea rdx, [0x1401361e8]
mov qword [0x14051f080], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f088], rax
cmp qword [0x14051f090], 0
jne 0x140086499
lea rcx, str.ole32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov qword [0x14051f090], rax
lea rdx, str.CoCreateInstance
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f090]
lea rdx, str.CoTaskMemAlloc
mov qword [0x14051f098], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f090]
lea rdx, str.CoTaskMemFree
mov qword [0x14051f0a0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f090]
lea rdx, str.CoInitializeEx
mov qword [0x14051f0a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f090]
lea rdx, str.CoFreeUnusedLibraries
mov qword [0x14051f0b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f090]
lea rdx, str.CoUninitialize
mov qword [0x14051f0b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f090]
lea rdx, str.CLSIDFromString
mov qword [0x14051f0c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f0c8], rax
cmp qword [0x14051f0d0], 0
jne 0x14008651f
lea rcx, str.oleaut32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov qword [0x14051f0d0], rax
lea rdx, str.SysAllocString
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f0d0]
lea rdx, str.SysFreeString
mov qword [0x14051f0d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f0d0]
lea rdx, str.VariantClear
mov qword [0x14051f0e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f0d0]
lea rdx, str.VariantInit
mov qword [0x14051f0e8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f0f0], rax
cmp qword [0x14051f0f8], 0
jne 0x140086559
lea rcx, str.comctl32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f0f8], rax
test rax, rax
je 0x140086559
lea rdx, str.InitCommonControls
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f100], rax
cmp qword [0x14051f7e0], 0
jne 0x1400865ae
lea rcx, str.Ole32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f7e0], rax
test rax, rax
je 0x1400865ae
lea rdx, str.CoSetProxyBlanket
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f7e0]
lea rdx, str.PropVariantClear
mov qword [0x14051f7e8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f7f0], rax
cmp qword [0x14051f108], 0
jne 0x14008745a
lea rcx, str.User32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov qword [0x14051f108], rax
lea rdx, str.WINNLSEnableIME
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.UpdateLayeredWindow
mov qword [0x14051f110], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CreateWindowExA
mov qword [0x14051f118], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CreateWindowExW
mov qword [0x14051f120], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.DestroyWindow
mov qword [0x14051f128], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.IsWindow
mov qword [0x14051f130], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.ShowWindow
mov qword [0x14051f138], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.UpdateWindow
mov qword [0x14051f140], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.BringWindowToTop
mov qword [0x14051f148], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetForegroundWindow
mov qword [0x14051f150], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetWindowThreadProcessId
mov qword [0x14051f158], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetActiveWindow
mov qword [0x14051f160], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetForegroundWindow
mov qword [0x14051f168], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetDesktopWindow
mov qword [0x14051f170], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.FindWindowA
mov qword [0x14051f178], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.FindWindowW
mov qword [0x14051f180], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.MoveWindow
mov qword [0x14051f188], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetWindowPos
mov qword [0x14051f190], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetClientRect
mov qword [0x14051f198], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.AdjustWindowRectEx
mov qword [0x14051f1a0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, [0x1401364d8]
mov qword [0x14051f1a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetWindowLongA
mov qword [0x14051f1b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetWindowLongW
mov qword [0x14051f1b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetWindowLongPtrA
mov qword [0x14051f1c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetWindowLongPtrW
mov qword [0x14051f1c8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetWindowLongA
mov qword [0x14051f1d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetWindowLongW
mov qword [0x14051f1d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetWindowLongPtrA
mov qword [0x14051f1e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetWindowLongPtrW
mov qword [0x14051f1e8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetWindowTextA
mov qword [0x14051f1f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetWindowTextW
mov qword [0x14051f1f8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.ClientToScreen
mov qword [0x14051f200], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.EnumDisplayDevicesA
mov qword [0x14051f208], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.EnumDisplayDevicesW
mov qword [0x14051f210], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.ShutdownBlockReasonCreate
mov qword [0x14051f218], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.ShutdownBlockReasonDestroy
mov qword [0x14051f248], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetTimer
mov qword [0x14051f250], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.PostThreadMessageA
mov qword [0x14051f258], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.PostThreadMessageW
mov qword [0x14051f260], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.PeekMessageA
mov qword [0x14051f268], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.PeekMessageW
mov qword [0x14051f270], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetMessageA
mov qword [0x14051f278], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetMessageW
mov qword [0x14051f280], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SendMessageA
mov qword [0x14051f288], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SendMessageW
mov qword [0x14051f290], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.PostMessageA
mov qword [0x14051f298], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.PostMessageW
mov qword [0x14051f2a0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.PostQuitMessage
mov qword [0x14051f2a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.DefWindowProcA
mov qword [0x14051f2b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.DefWindowProcW
mov qword [0x14051f2b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.TranslateAcceleratorA
mov qword [0x14051f2c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.TranslateAcceleratorW
mov qword [0x14051f2c8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.TranslateMessage
mov qword [0x14051f2d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.DispatchMessageA
mov qword [0x14051f2d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.DispatchMessageW
mov qword [0x14051f2e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.MsgWaitForMultipleObjects
mov qword [0x14051f2e8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetQueueStatus
mov qword [0x14051f2f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.RegisterWindowMessageA
mov qword [0x14051f2f8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.RegisterWindowMessageW
mov qword [0x14051f300], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.RegisterClassA
mov qword [0x14051f308], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f310], rax
mov rcx, qword [0x14051f108]
lea rdx, str.RegisterClassW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.RegisterClassExA
mov qword [0x14051f318], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.RegisterClassExW
mov qword [0x14051f320], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.UnregisterClassA
mov qword [0x14051f328], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.UnregisterClassW
mov qword [0x14051f330], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetClassLongA
mov qword [0x14051f338], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetClassLongW
mov qword [0x14051f340], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetClassLongPtrA
mov qword [0x14051f348], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetClassLongPtrW
mov qword [0x14051f350], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetDC
mov qword [0x14051f358], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.ReleaseDC
mov qword [0x14051f360], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.BeginPaint
mov qword [0x14051f368], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.EndPaint
mov qword [0x14051f370], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.MessageBoxA
mov qword [0x14051f378], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, [0x140136908]
mov qword [0x14051f380], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetSystemMetrics
mov qword [0x14051f388], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.ChangeDisplaySettingsA
mov qword [0x14051f390], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.ChangeDisplaySettingsW
mov qword [0x14051f398], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.ShowCursor
mov qword [0x14051f3a0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetCursorPos
mov qword [0x14051f3a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f3b0], rax
lea rdx, str.GetCursorPos
mov rcx, qword [0x14051f108]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetCursor
mov qword [0x14051f3b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.LoadCursorA
mov qword [0x14051f3c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.LoadCursorW
mov qword [0x14051f3c8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.LoadIconA
mov qword [0x14051f3d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.LoadIconW
mov qword [0x14051f3d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.ClipCursor
mov qword [0x14051f3e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.LoadMenuA
mov qword [0x14051f3e8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.LoadMenuW
mov qword [0x14051f3f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CreateMenu
mov qword [0x14051f3f8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.DeleteMenu
mov qword [0x14051f400], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.DestroyMenu
mov qword [0x14051f408], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.EnableMenuItem
mov qword [0x14051f410], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetSubMenu
mov qword [0x14051f418], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetMenuItemInfoA
mov qword [0x14051f420], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetMenuItemInfoW
mov qword [0x14051f428], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetMenuItemInfoA
mov qword [0x14051f430], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetMenuItemInfoW
mov qword [0x14051f438], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetMenu
mov qword [0x14051f440], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.DrawMenuBar
mov qword [0x14051f448], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetMenuItemCount
mov qword [0x14051f450], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.InsertMenuItemA
mov qword [0x14051f458], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.InsertMenuItemW
mov qword [0x14051f460], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetWindowRgn
mov qword [0x14051f468], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.FillRect
mov qword [0x14051f470], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SystemParametersInfoA
mov qword [0x14051f478], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SystemParametersInfoW
mov qword [0x14051f480], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.AttachThreadInput
mov qword [0x14051f488], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.UnhookWindowsHookEx
mov qword [0x14051f490], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetKeyboardState
mov qword [0x14051f498], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.KillTimer
mov qword [0x14051f4a0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.EnumDisplaySettingsA
mov qword [0x14051f4a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.EnumDisplaySettingsW
mov qword [0x14051f4b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.EnumDisplayMonitors
mov qword [0x14051f4b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.IsDialogMessageA
mov qword [0x14051f4c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.IsDialogMessageW
mov qword [0x14051f4c8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.OpenClipboard
mov qword [0x14051f4d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CloseClipboard
mov qword [0x14051f4d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.EmptyClipboard
mov qword [0x14051f4e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.SetClipboardData
mov qword [0x14051f4e8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetClipboardData
mov qword [0x14051f4f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.IsClipboardFormatAvailable
mov qword [0x14051f4f8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CreateAcceleratorTableA
mov qword [0x14051f500], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CreateAcceleratorTableW
mov qword [0x14051f508], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.DestroyAcceleratorTable
mov qword [0x14051f510], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CopyAcceleratorTableA
mov qword [0x14051f518], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CopyAcceleratorTableW
mov qword [0x14051f520], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetMonitorInfoA
mov qword [0x14051f528], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetMonitorInfoW
mov qword [0x14051f530], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CharLowerBuffA
mov qword [0x14051f538], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CharLowerBuffW
mov qword [0x14051f540], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetRawInputDeviceList
mov qword [0x14051f548], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetRawInputDeviceInfoA
mov qword [0x14051f550], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.CloseTouchInputHandle
mov qword [0x14051f558], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.GetTouchInputInfo
mov qword [0x14051f220], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.IsTouchWindow
mov qword [0x14051f228], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.RegisterTouchWindow
mov qword [0x14051f230], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f108]
lea rdx, str.UnregisterTouchWindow
mov qword [0x14051f238], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f240], rax
cmp qword [0x14051f560], 0
jne 0x14008789e
lea rcx, str.gdi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f560], rax
test rax, rax
je 0x14008789e
lea rdx, str.AddFontMemResourceEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.RemoveFontMemResourceEx
mov qword [0x14051f568], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetFontUnicodeRanges
mov qword [0x14051f570], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetDeviceCaps
mov qword [0x14051f578], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.EnumFontFamiliesExA
mov qword [0x14051f580], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.EnumFontFamiliesExW
mov qword [0x14051f588], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.CreateFontA
mov qword [0x14051f590], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.CreateFontW
mov qword [0x14051f598], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetTextMetricsA
mov qword [0x14051f5a0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetTextMetricsW
mov qword [0x14051f5a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetTextExtentPoint32A
mov qword [0x14051f5b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetTextExtentPoint32W
mov qword [0x14051f5b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetCharacterPlacementA
mov qword [0x14051f5c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetCharacterPlacementW
mov qword [0x14051f5c8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetGlyphOutlineA
mov qword [0x14051f5d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetGlyphOutlineW
mov qword [0x14051f5d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.TextOutA
mov qword [0x14051f5e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.TextOutW
mov qword [0x14051f5e8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.SetTextColor
mov qword [0x14051f5f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.SetBkColor
mov qword [0x14051f5f8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f600], rax
lea rdx, str.SetBkMode
mov rcx, qword [0x14051f560]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.CreateCompatibleDC
mov qword [0x14051f608], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.CreateDCA
mov qword [0x14051f610], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.CreateDCW
mov qword [0x14051f618], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetObjectA
mov qword [0x14051f620], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetObjectW
mov qword [0x14051f628], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetStockObject
mov qword [0x14051f630], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.SelectObject
mov qword [0x14051f638], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.DeleteObject
mov qword [0x14051f640], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.DeleteDC
mov qword [0x14051f648], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.CreateSolidBrush
mov qword [0x14051f650], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.Rectangle
mov qword [0x14051f658], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.BitBlt
mov qword [0x14051f660], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.CreateDIBSection
mov qword [0x14051f668], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.StretchDIBits
mov qword [0x14051f670], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.SetDIBitsToDevice
mov qword [0x14051f678], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.CreateRectRgn
mov qword [0x14051f680], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.CombineRgn
mov qword [0x14051f688], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f560]
lea rdx, str.GetKerningPairsW
mov qword [0x14051f690], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f698], rax
cmp qword [0x14051f6a0], 0
jne 0x14008799d
lea rcx, str.advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f6a0], rax
test rax, rax
je 0x14008799d
lea rdx, str.RegOpenKeyA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f6a0]
lea rdx, str.RegOpenKeyW
mov qword [0x14051f6a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f6a0]
lea rdx, str.RegEnumKeyA
mov qword [0x14051f6b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f6a0]
lea rdx, str.RegEnumKeyW
mov qword [0x14051f6b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f6a0]
lea rdx, str.RegOpenKeyExA
mov qword [0x14051f6c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f6a0]
lea rdx, str.RegOpenKeyExW
mov qword [0x14051f6c8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f6a0]
lea rdx, str.RegQueryValueExA
mov qword [0x14051f6d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f6a0]
lea rdx, str.RegQueryValueExW
mov qword [0x14051f6d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f6e0], rax
cmp qword [0x14051f6e8], 0
jne 0x140087a2c
lea rcx, str.shell32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f6e8], rax
test rax, rax
je 0x140087a2c
lea rdx, str.DragQueryFileA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f6e8]
lea rdx, str.DragQueryFileW
mov qword [0x14051f6f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f6e8]
lea rdx, str.DragFinish
mov qword [0x14051f6f8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f6e8]
lea rdx, str.DragAcceptFiles
mov qword [0x14051f700], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f708], rax
cmp qword [0x14051f710], 0
jne 0x140087a66
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f710], rax
test rax, rax
je 0x140087a66
lea rdx, str.RtlGetVersion
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f718], rax
cmp qword [0x14051f720], 0
jne 0x140087b4a
lea rcx, str.Mfplat.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f720], rax
test rax, rax
je 0x140087b4a
lea rdx, str.MFStartup
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f720]
lea rdx, str.MFShutdown
mov qword [0x14051f728], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f720]
lea rdx, str.MFCreateMediaType
mov qword [0x14051f730], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f720]
lea rdx, str.MFCreateWaveFormatExFromMFMediaType
mov qword [0x14051f738], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f720]
lea rdx, str.MFCreateAttributes
mov qword [0x14051f740], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f720]
lea rdx, str.MFCreateAsyncResult
mov qword [0x14051f748], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f720]
lea rdx, str.MFInvokeCallback
mov qword [0x14051f750], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f758], rax
cmp qword [0x14051f760], 0
jne 0x140087b9f
lea rcx, str.Mfreadwrite.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f760], rax
test rax, rax
je 0x140087b9f
lea rdx, str.MFCreateSourceReaderFromURL
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f760]
lea rdx, str.MFCreateSourceReaderFromByteStream
mov qword [0x14051f768], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f770], rax
cmp qword [0x14051f778], 0
jne 0x140087bd9
lea rcx, str.Propsys.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f778], rax
test rax, rax
je 0x140087bd9
lea rdx, str.PropVariantToInt64
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f780], rax
cmp qword [0x14051f788], 0
jne 0x140087c2e
lea rcx, str.usp10.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f788], rax
test rax, rax
je 0x140087c2e
lea rdx, str.ScriptItemize
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f788]
lea rdx, str.ScriptShape
mov qword [0x14051f790], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f798], rax
cmp qword [0x14051f7a0], 0
jne 0x140087c9e
lea rcx, str.shcore.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f7a0], rax
test rax, rax
je 0x140087c9e
lea rdx, str.SetProcessDpiAwareness
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f7a0]
lea rdx, str.GetProcessDpiAwareness
mov qword [0x14051f7a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f7a0]
lea rdx, str.GetDpiForMonitor
mov qword [0x14051f7b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f7b8], rax
cmp qword [0x14051f7f8], 0
jne 0x140087cf3
lea rcx, str.dwmapi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x14051f7f8], rax
test rax, rax
je 0x140087cf3
lea rdx, str.DwmEnableComposition
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14051f7f8]
lea rdx, str.DwmGetWindowAttribute
mov qword [0x14051f800], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14051f808], rax
mov ebx, 0xffff
lea rdx, [rsp + 0x20]
mov ecx, 0x400
mov word [rsp + 0x20], bx
call qword [0x14051efd8]
xor eax, eax
cmp word [rsp + 0x20], bx
mov rbx, qword [rsp + 0x830]
setne al
mov dword [0x14051ed34], eax
mov dword [0x14051ed30], 1
xor eax, eax
mov rcx, qword [rsp + 0x820]
xor rcx, rsp
call fcn.140107200
add rsp, 0x838
ret