Function at 0x5e3a498
Capabilities:
Check for time delay via gettickcount
Identify system language via api
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0xcc
mov eax, dword [sym.imp.USER32.dll_GetDoubleClickTime]
and dword [0x5e58178], 0xd4cc2faf
mov dword [ebp - 0xa4], eax
call eax
or eax, 0x6ced1e9d
mov dword [0x5e58178], eax
xor eax, eax
cmp byte [eax + str.Invalid_recursive_dispatch_attempt.], 0
je 0x5e3a4e7
inc eax
cmp eax, 0x1784
jne 0x5e3a4c7
call fcn.05e42ae4
xor dword [0x5e58178], 0x1c1412d7
mov eax, dword [0x5e58178]
mov ebx, 0x100
and eax, 0x54e4fa28
or eax, 0x4007028
mov dword [0x5e58178], eax
mov eax, dword [0x5e58178]
xor eax, 0x4a6dafcb
and eax, 0xb5ab7e6f
add eax, 0x260d1a2f
mov dword [0x5e58178], eax
mov dword [esp], str.Collection_of_network_diagnostic_events_is_disabled.
call fcn.05e43278
mov eax, dword [0x5e58178]
and eax, 0xa61642ae
mov dword [0x5e58178], eax
dec ebx
jne 0x5e3a500
mov edx, 0x100
and eax, 0x51b28bc6
dec edx
jne 0x5e3a53c
xor eax, 0xc0dcb6a7
mov edx, 0x2d
xor eax, 0xe387e67d
imul eax, eax, 0xcf8fb223
xor eax, 0x5b20bace
dec edx
jne 0x5e3a54e
sub eax, 0xd7b2987
lea edi, [ebp - 0x6c]
mov esi, 0x5e45048
xor ebx, ebx
mov dword [0x5e58178], eax
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov ecx, 5
push eax
rep movsd dword es:[edi], dword [esi]
mov edi, 0x2400
mov edx, str.Collection_of_network_diagnostic_events_is_disabled.
mov al, byte [edx]
test al, al
je 0x5e3a5b1
sub eax, 0x30
cmp al, 9
jbe 0x5e3a5ae
imul eax, dword [0x5e58178], 0xdb5c5424
mov dword [0x5e58178], eax
jmp 0x5e3a5b1
inc edx
jmp 0x5e3a590
imul esi, dword [0x5e58178], 0xd08b0718
mov dword [esp + 4], str.DecryptFileW
mov dword [esp], str.The_endpoint_mapper_database_entry_could_not_be_created.
call fcn.05e42424
mov eax, esi
mov ecx, str.The_endpoint_mapper_database_entry_could_not_be_created.
mov esi, 0x15b2
and eax, 0x786bba94
mov dword [0x5e58178], eax
movsx edx, byte [ecx]
inc ecx
test dl, dl
je 0x5e3a601
add esi, edx
cmp esi, 0x1e8f
jbe 0x5e3a5e5
sub eax, 0x79acb133
mov dword [0x5e58178], eax
and dword [0x5e58178], 0xd4cc068
sub edi, dword [ebp + ebx*4 - 0x6c]
inc ebx
mov dword [ebp - 0x9c], edi
cmp ebx, 5
jne 0x5e3a58b
lea edi, [ebp - 0x7c]
mov esi, 0x5e4505c
mov ecx, 4
xor ebx, ebx
rep movsd dword es:[edi], dword [esi]
mov esi, 0x45
mov edx, str.The_resumable_flag_to_a_timer_API_was_ignored.
mov al, byte [edx]
test al, al
je 0x5e3a656
sub eax, 0x30
cmp al, 9
jbe 0x5e3a653
sub dword [0x5e58178], 0x1f9457c8
jmp 0x5e3a656
inc edx
jmp 0x5e3a63a
sub dword [0x5e58178], 0x16ce95a4
mov dword [esp + 4], str.No_HD_Audio_subdevices_were_successfully_created.
mov dword [esp], str.The_resumable_flag_to_a_timer_API_was_ignored.
call fcn.05e42424
add esi, dword [ebp + ebx*4 - 0x7c]
inc ebx
mov dword [ebp - 0xa0], esi
cmp ebx, 4
jne 0x5e3a635
mov dword [esp], str.An_RPC_protocol_error_occurred.
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
call ebx
mov ecx, str.Invalid_recursive_dispatch_attempt.
push eax
mov edx, dword [0x5e58178]
lea eax, [edx + 0x2d784f5f]
mov dword [0x5e58178], eax
mov al, byte [ecx]
test al, al
je 0x5e3a6c8
sub eax, 0x30
cmp al, 9
jbe 0x5e3a6c5
sub edx, 0x40643093
mov dword [0x5e58178], edx
jmp 0x5e3a6c8
inc ecx
jmp 0x5e3a6aa
imul eax, dword [0x5e58178], 0x99180bf2
mov esi, 0x100
sub eax, 0x7e7989bf
mov dword [0x5e58178], eax
imul eax, dword [0x5e58178], 0xd7d117c4
or eax, 0x2d749c8b
imul eax, eax, 0x9704c60f
mov dword [0x5e58178], eax
mov dword [esp], str.The_endpoint_mapper_database_entry_could_not_be_created.
call fcn.05e3fdfc
dec esi
jne 0x5e3a6e1
mov eax, dword [0x5e58178]
mov edx, 0x2c
add eax, 0x2767b870
xor eax, 0x398755b8
xor eax, 0x329acb4d
dec edx
jne 0x5e3a71e
lea edx, [eax + 0x5ee0ba17]
mov ecx, str.Invalid_recursive_dispatch_attempt.
mov dword [0x5e58178], edx
mov dl, byte [ecx]
test dl, dl
je 0x5e3a754
sub edx, 0x30
cmp dl, 9
jbe 0x5e3a751
sub eax, 0x378abacd
mov dword [0x5e58178], eax
jmp 0x5e3a754
inc ecx
jmp 0x5e3a737
and dword [0x5e58178], 0x898bbf60
mov dword [esp], str.drvGetDefaultCommConfigW
call fcn.05e43278
mov eax, dword [0x5e58178]
or eax, 0x9ed1f7df
sub eax, 0x19431960
mov dword [0x5e58178], eax
mov dword [esp], str.Win32_x86_emulation_subsystem_Floating_point_stack_check.
call ebx
push edi
mov eax, dword [0x5e58178]
and eax, 0x24200280
or eax, 0x2d1814c0
cmp byte [str.Invalid_recursive_dispatch_attempt.], 0
mov dword [0x5e58178], eax
je 0x5e3a7dd
mov dword [esp + 8], str.Failed_to_read_MATCHING_REG_entry
mov dword [esp + 4], str.The_users_account_has_expired.
mov dword [esp], str.The_Supplemental_Policy_is_not_recognized_on_this_device.
call fcn.05e3df04
mov eax, dword [ebp - 0xa4]
or dword [0x5e58178], 0xff7a806a
call eax
add eax, 0x56d30cd5
mov dword [0x5e58178], eax
mov eax, dword [0x5e58178]
lea edi, [ebp - 0x58]
mov esi, 0x5e4506c
add eax, 0x36e657cc
imul eax, eax, 0x240295aa
mov dword [0x5e58178], eax
call fcn.05e44104
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
call ebx
mov ecx, 5
xor edx, edx
rep movsd dword es:[edi], dword [esi]
imul eax, eax, 0x6ee04d65
and eax, 0x95440ba8
or eax, 0xbeb4efff
sub ecx, dword [ebp + edx*4 - 0x58]
inc edx
and eax, 0x7fbfae3d
mov dword [ebp - 0xa4], ecx
cmp edx, 5
jne 0x5e3a820
mov dword [0x5e58178], eax
xor eax, eax
cmp byte [eax + str.Collection_of_network_diagnostic_events_is_disabled.], 0
je 0x5e3a861
inc eax
cmp eax, 0xb5b
jne 0x5e3a83c
call fcn.05e44104
imul eax, dword [0x5e58178], 0xf7cb3c7d
mov dword [0x5e58178], eax
mov eax, dword [0x5e58178]
and eax, 0x6681e99b
xor eax, 0x6d804856
mov dword [0x5e58178], eax
call fcn.05e41658
xor edx, edx
imul eax, dword [0x5e58178], 0x3df43184
and eax, 0xa302c015
mov dword [0x5e58178], eax
cmp byte [edx + str.Invalid_recursive_dispatch_attempt.], 0
je 0x5e3a8ac
inc edx
cmp edx, 0xad9
jne 0x5e3a890
xor eax, 0xddb3c26b
mov dword [0x5e58178], eax
mov eax, dword [0x5e58178]
add eax, 0x21dbf865
or eax, 0x782a4aa5
mov dword [0x5e58178], eax
call fcn.05e414bc
mov edx, dword [0x5e58178]
mov ecx, str.The_resumable_flag_to_a_timer_API_was_ignored.
mov eax, edx
and eax, 0xffd60957
mov dword [0x5e58178], eax
mov al, byte [ecx]
test al, al
je 0x5e3a8fa
sub eax, 0x30
cmp al, 9
jbe 0x5e3a8f7
and edx, 0x9d420110
mov dword [0x5e58178], edx
jmp 0x5e3a8fa
inc ecx
jmp 0x5e3a8dc
mov eax, dword [0x5e58178]
sub eax, 0x1d23e6b3
cmp byte [str.The_resumable_flag_to_a_timer_API_was_ignored.], 0
mov dword [0x5e58178], eax
je 0x5e3a91c
or eax, 0xc2bf93b6
mov dword [0x5e58178], eax
mov eax, dword [0x5e58178]
add eax, 0x25ea73ec
and eax, 0x1b7b966f
mov dword [0x5e58178], eax
call fcn.05e41658
mov eax, dword [0x5e58178]
xor eax, 0xadd68fa0
mov dword [0x5e58178], eax
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsZoomed]
push ecx
xor eax, 0x9db9ebf7
mov dword [0x5e58178], eax
mov dword [esp], 0x170a
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
push esi
xor dword [0x5e58178], 0xf926fd04
call ebx
mov eax, dword [0x5e58178]
sub eax, 0x6c604217
imul eax, eax, 0xd1eaa42c
xor eax, 0xd954fee9
mov edx, eax
and edx, 0xb69f2c98
or edx, 0x1b56cd1e
mov dword [0x5e58178], edx
xor edx, edx
cmp byte [edx + str.drvGetDefaultCommConfigW], 0
je 0x5e3a9be
inc edx
cmp edx, 0x17a2
jne 0x5e3a99d
and eax, 0xa28b0418
or eax, 0x342c51c
mov dword [0x5e58178], eax
mov eax, dword [0x5e58178]
xor ebx, ebx
mov esi, 0x30
and eax, 0x791cbf81
add eax, 0x5926b9dc
mov dword [0x5e58178], eax
mov dword [esp], str.drvGetDefaultCommConfigW
call fcn.05e43058
mov dword [ebp - 0x80], 0xffffffd9
mov dword [ebp - 0x88], 0xe
mov dword [ebp - 0x84], 0x45
xor eax, eax
cmp byte [eax + str.drvGetDefaultCommConfigW], 0
je 0x5e3aa29
inc eax
cmp eax, 0x1f99
jne 0x5e3aa02
mov dword [esp], str.Collection_of_network_diagnostic_events_is_disabled.
call fcn.05e3efbc
and dword [0x5e58178], 0xc34704c4
mov eax, dword [0x5e58178]
and eax, 0xb313067a
sub eax, 0x65923cd0
mov dword [0x5e58178], eax
mov dword [esp], str.drvGetDefaultCommConfigW
call fcn.05e3efbc
sub esi, dword [ebp + ebx*4 - 0x88]
inc ebx
add dword [0x5e58178], 0x342ccc82
mov dword [ebp - 0xa8], esi
cmp ebx, 3
jne 0x5e3aa00
lea edi, [ebp - 0x44]
mov esi, 0x5e45080
mov ecx, 5
xor ebx, ebx
rep movsd dword es:[edi], dword [esi]
xor esi, esi
mov dword [esp], str.The_endpoint_mapper_database_entry_could_not_be_created.
call fcn.05e3fdfc
mov eax, dword [0x5e58178]
sub esi, dword [ebp + ebx*4 - 0x44]
inc ebx
mov dword [ebp - 0xac], esi
or eax, 0xc8638c
imul eax, eax, 0x71762972
mov dword [0x5e58178], eax
cmp ebx, 5
jne 0x5e3aa79
xor eax, 0xaf34409
mov dword [0x5e58178], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea edx, [eax - 0x11997675]
mov dword [0x5e58178], edx
xor edx, edx
cmp byte [edx + str.Invalid_recursive_dispatch_attempt.], 0
je 0x5e3aae4
inc edx
cmp edx, 0x250a
jne 0x5e3aac8
add eax, 0x4619e746
mov dword [0x5e58178], eax
sub dword [0x5e58178], 0x2aff9665
mov dword [esp + 8], str.SafeProcessSearchMode
mov dword [esp + 4], str.FullDllName
mov dword [esp], str.WER_Recovery:_u:_ERROR_Invalid_params
call fcn.05e3df04
mov edx, str.Collection_of_network_diagnostic_events_is_disabled.
mov al, byte [edx]
test al, al
je 0x5e3ab2b
sub eax, 0x30
cmp al, 9
jbe 0x5e3ab28
xor dword [0x5e58178], 0xdeac6eb0
jmp 0x5e3ab2b
inc edx
jmp 0x5e3ab0f
add dword [0x5e58178], 0x6480683b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
or eax, 0x7dadc944
mov dword [ebp - 0x94], edx
mov dword [0x5e58178], eax
lea eax, [ebp - 0x94]
mov dword [esp + 4], eax
lea eax, [ebp - 0x98]
mov dword [esp], eax
call fcn.05e38ce0
xor edx, edx
test eax, eax
jns 0x5e3abe3
cmp byte [edx + str.Collection_of_network_diagnostic_events_is_disabled.], 0
je 0x5e3ab89
inc edx
cmp edx, 0x152b
jne 0x5e3ab6b
add dword [0x5e58178], 0x7b18c5d6
jmp 0x5e3ab9b
mov eax, dword [0x5e58178]
and eax, 0x9047a538
cmp edx, 0x47b
jle 0x5e3abbe
mov eax, dword [0x5e58178]
mov dword [esp], str.LoadResource_API_entry
mov dword [esp + 8], eax
mov dword [esp + 4], eax
call fcn.05e41744
imul eax, dword [0x5e58178], 0x220ce10f
sub eax, 0x319bd373
mov dword [0x5e58178], eax
mov dword [esp + 4], str.StandardName
mov dword [esp], str.drvGetDefaultCommConfigW
call fcn.05e42424
xor eax, eax
jmp 0x5e3b45f
mov eax, dword [ebp - 0x9c]
shl eax, 0xa
mov dword [esp], eax
call fcn.05e3c6c0
mov edx, dword [0x5e45094]
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x90]
mov dword [esp + 0x14], eax
mov eax, dword [edx + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [edx + 0x4c]
mov dword [esp + 8], 0x100000
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x9c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xa0]
or ah, 1
movzx eax, ax
mov dword [esp], eax
call dword [edx + 0x14]
xor eax, eax
sub esp, 0x18
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x30]
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 0xc], 0x18
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x98]
mov dword [esp], eax
call fcn.05e31083
mov dword [esp], 0x248
call fcn.05e3c6c0
mov dword [esp + 0xc], 0x248
mov ebx, eax
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 8], ebx
mov eax, dword [ebp - 0x2c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x98]
mov dword [esp], eax
call fcn.05e310ab
mov edx, dword [0x5e58178]
mov ecx, str.Collection_of_network_diagnostic_events_is_disabled.
mov eax, edx
or eax, 0xaaf8933f
mov dword [0x5e58178], eax
mov al, byte [ecx]
test al, al
je 0x5e3ace0
sub eax, 0x30
cmp al, 9
jbe 0x5e3acdd
or edx, 0xaafcdbbf
mov dword [0x5e58178], edx
mov dword [esp], str.TermsrvAdjustPhyMemLimits
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
jmp 0x5e3ace0
inc ecx
jmp 0x5e3acb4
add dword [0x5e58178], 0x234441f7
call fcn.05e42ae4
mov dword [esp], 0x16e6
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
push eax
mov dword [esp], ebx
call fcn.05e3c6f0
cmp byte [str.Collection_of_network_diagnostic_events_is_disabled.], 0
je 0x5e3ad1d
call fcn.05e44104
add dword [0x5e58178], 0xc60d994
mov eax, dword [0x5e58178]
and eax, 0x26ef38b8
imul eax, eax, 0x26024822
mov dword [0x5e58178], eax
call fcn.05e44104
mov eax, dword [ebp - 0x9c]
cmp word [eax], 0x5a4d
je 0x5e3ad62
mov eax, dword [0x5e58178]
sub eax, 0x4bfbed19
mov dword [0x5e58178], eax
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push edi
jmp 0x5e3b2f4
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
xor esi, esi
mov ebx, dword [eax + 0x3c]
add ebx, eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x8c], eax
lea eax, [ebx + 0x50]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x8c]
mov dword [esp + 8], ecx
mov dword [esp + 0x14], 0x40
mov dword [esp + 0x10], 0x3000
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x98]
mov dword [esp], eax
call fcn.05e310b5
mov eax, dword [ebx + 0x54]
mov dword [esp], eax
call fcn.05e3c6c0
mov edi, eax
mov eax, dword [ebx + 0x54]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x9c]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.05e3c67c
mov dword [esp + 0x10], esi
mov eax, dword [ebx + 0x54]
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x8c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x98]
mov dword [esp], eax
call fcn.05e310bf
mov dword [ebp - 0xa0], eax
test eax, eax
je 0x5e3b09f
imul eax, dword [0x5e58178], 0x62a7a64f
mov ebx, 0x100
or eax, 0x7e144da5
mov dword [0x5e58178], eax
mov esi, dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
call esi
xor edx, edx
movzx eax, ax
xor eax, 0x1596b95d
mov dword [0x5e58178], eax
cmp byte [edx + str.drvGetDefaultCommConfigW], 0
je 0x5e3ae7c
inc edx
cmp edx, 0x62f
jne 0x5e3ae3b
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.The_requested_operation_cannot_be_performed_in_fullscreen_mode.
mov dword [esp + 4], str.No_mode_is_pinned_on_the_specified_VidPN_source_target.
mov dword [esp], str.Luminance
call fcn.05e4298c
imul eax, dword [0x5e58178], 0x3670dfa6
mov dword [0x5e58178], eax
imul eax, dword [0x5e58178], 0x6accc8d8
and eax, 0x7fb6d5cf
mov dword [0x5e58178], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
or eax, 0xa05011af
mov dword [0x5e58178], eax
mov dword [esp], str.A_process_being_terminated_has_no_threads_to_terminate.
call fcn.05e4212c
dec ebx
jne 0x5e3ae24
xor dword [0x5e58178], 0xb366951d
mov ebx, 0x46
mov edx, str.The_endpoint_mapper_database_entry_could_not_be_created.
mov ecx, 0xc4e
movsx eax, byte [edx]
inc edx
test al, al
je 0x5e3af10
add ecx, eax
cmp ecx, 0x1256
jbe 0x5e3aecc
mov dword [esp], str.Invalid_recursive_dispatch_attempt.
call fcn.05e3efbc
or dword [0x5e58178], 0x6671155
mov dword [esp + 8], str.Unknown_registry_value_data_type
mov dword [esp + 4], 0x5e5ac28
mov dword [esp], str.The_IPsec_cipher_transform_is_not_valid.
call fcn.05e3df04
imul eax, dword [0x5e58178], 0xf51c7013
mov dword [0x5e58178], eax
mov dword [esp], 0x5e5acb8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
imul eax, eax, 0xaeacf6fd
push edx
xor eax, 0x2cb77deb
sub eax, 0x4cd57587
cmp byte [str.Invalid_recursive_dispatch_attempt.], 0
mov dword [0x5e58178], eax
je 0x5e3af56
imul eax, eax, 0xdb059399
mov dword [0x5e58178], eax
imul eax, dword [0x5e58178], 0x41854e52
and eax, 0x95594e8b
mov dword [0x5e58178], eax
mov dword [esp], eax
mov dword [esp + 8], str.PartA_PrivTags
mov dword [esp + 4], str.LoadResource_API_exit
call fcn.05e425c0
mov eax, dword [0x5e58178]
xor edx, edx
and eax, 0x812d7435
mov dword [0x5e58178], eax
cmp byte [edx + str.drvGetDefaultCommConfigW], 0
je 0x5e3afb0
inc edx
cmp edx, 0x1cf9
jne 0x5e3af93
imul eax, eax, 0x4f106066
mov dword [0x5e58178], eax
mov eax, dword [0x5e58178]
sub eax, 0x2cccd348
and eax, 0x513fca88
xor eax, 0x4a7b0da2
sub eax, 0x6801f4b1
or eax, 0x7add0d96
sub eax, 0xeb3e392
mov dword [0x5e58178], eax
mov dword [esp], eax
mov dword [esp + 8], str.Unit_Attention_data_is_available_for_the_initiator_to_query.
mov dword [esp + 4], str.None_of_the_information_to_be_translated_has_been_translated.
call fcn.05e425c0
mov eax, dword [0x5e58178]
add eax, 0x6df2490
imul eax, eax, 0x3800739b
mov dword [0x5e58178], eax
call fcn.05e414bc
dec ebx
jne 0x5e3aec2
xor eax, eax
cmp byte [eax + str.drvGetDefaultCommConfigW], 0
je 0x5e3b02e
inc eax
cmp eax, 0x2182
jne 0x5e3b013
or dword [0x5e58178], 0xda31559e
mov ebx, dword [0x5e58178]
mov dword [esp + 4], str.RtlStringCchCopyA_failed___x_
mov dword [esp], str.drvGetDefaultCommConfigW
and ebx, 0xb00102
call fcn.05e42424
mov dword [0x5e58178], ebx
call esi
mov edx, str.The_resumable_flag_to_a_timer_API_was_ignored.
mov al, byte [edx]
test al, al
je 0x5e3b077
sub eax, 0x30
cmp al, 9
jbe 0x5e3b074
or dword [0x5e58178], 0x9268a64e
jmp 0x5e3b077
inc edx
jmp 0x5e3b05b
imul eax, dword [0x5e58178], 0x26bbb6dd
mov dword [0x5e58178], eax
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov dword [esp], str.The_disk_contains_non_simple_volumes.
call fcn.05e41744
jmp 0x5e3b2ec
mov dword [esp], edi
call fcn.05e3c6f0
movzx eax, word [ebx + 0x14]
lea esi, [ebx + eax + 0x18]
xor eax, eax
mov dword [ebp - 0xa4], eax
jmp 0x5e3b0ca
mov dword [esp], edi
add esi, 0x28
call fcn.05e3c6f0
inc dword [ebp - 0xa4]
movzx eax, word [ebx + 6]
mov edi, dword [ebp - 0xa4]
cmp eax, edi
jle 0x5e3b347
mov eax, dword [esi + 0x10]
mov dword [esp], eax
call fcn.05e3c6c0
mov edi, eax
mov eax, dword [esi + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x9c]
add eax, dword [esi + 0x14]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.05e3c67c
xor eax, eax
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x10]
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov eax, dword [esi + 0xc]
add eax, dword [ebp - 0x8c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x98]
mov dword [esp], eax
call fcn.05e310bf
test eax, eax
je 0x5e3b0b9
mov eax, dword [0x5e58178]
mov ebx, 0x41
add eax, 0x6154e7d6
imul eax, eax, 0x6f51d66a
or eax, 0x760c028a
mov dword [0x5e58178], eax
mov edx, str.Invalid_recursive_dispatch_attempt.
mov ecx, 0x19f6
movzx eax, byte [edx]
inc edx
test al, al
je 0x5e3b18d
add ecx, eax
cmp ecx, 0x248a
jbe 0x5e3b15e
call fcn.05e42ae4
or dword [0x5e58178], 0xef20f7f3
mov dword [esp], 0x2455
call dword [sym.imp.USER32.dll_GetTopWindow]
push ecx
mov eax, dword [0x5e58178]
sub eax, 0xc41ee30
imul eax, eax, 0xe8bd80dd
mov dword [0x5e58178], eax
mov dword [esp], eax
mov dword [esp + 8], str.ContainerCorrelationId
mov dword [esp + 4], str.The_specified_copy_of_the_requested_data_could_not_be_read.
call fcn.05e425c0
mov eax, dword [0x5e58178]
and eax, 0x9586f009
cmp byte [str.The_resumable_flag_to_a_timer_API_was_ignored.], 0
mov dword [0x5e58178], eax
je 0x5e3b1dd
imul eax, eax, 0xda3393de
mov dword [0x5e58178], eax
sub dword [0x5e58178], 0x3f407c6
call fcn.05e3ecec
mov eax, dword [0x5e58178]
add eax, 0x3c61d96c
and eax, 0x3517ea72
mov dword [0x5e58178], eax
call fcn.05e3ecec
dec ebx
jne 0x5e3b154
mov eax, dword [ebp - 0xa0]
cmp byte [eax + str.The_endpoint_mapper_database_entry_could_not_be_created.], 0
jne 0x5e3b30d
mov eax, dword [0x5e58178]
xor eax, 0xa1d60f07
cmp dword [ebp - 0xa0], 0x1891
jg 0x5e3b338
and eax, 0x3b4169c7
mov dword [0x5e58178], eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.RelativePathWithAlteredSearchError
mov dword [esp + 4], str.The_cloud_file_provider_is_not_running.
mov dword [esp], str.AslEnvExpandStrings2_failed_to_expand_strings_for__ws___x_
call fcn.05e4298c
mov eax, dword [0x5e58178]
cmp byte [str.Invalid_recursive_dispatch_attempt.], 0
lea edx, [eax + 0x71fc3dfb]
mov dword [0x5e58178], edx
je 0x5e3b287
add eax, 0x33f479ec
mov dword [0x5e58178], eax
add dword [0x5e58178], 0x2a2c129f
call fcn.05e414bc
mov edx, str.Collection_of_network_diagnostic_events_is_disabled.
mov ecx, 0xb01
movzx eax, byte [edx]
inc edx
test al, al
je 0x5e3b2d8
add ecx, eax
cmp ecx, 0x1a61
jbe 0x5e3b2a0
mov dword [esp + 8], str.AslpPathWildcardAllocMatchNode_failed___x_
mov dword [esp + 4], 0x5e5b094
mov dword [esp], 0x5e5b0b4
call fcn.05e3df04
sub dword [0x5e58178], 0x56dea462
imul eax, dword [0x5e58178], 0xbab52f13
xor eax, 0xa5888f58
mov dword [0x5e58178], eax
mov dword [esp], edi
call fcn.05e3c6f0
xor edx, edx
mov dword [esp + 4], edx
mov eax, dword [ebp - 0x94]
mov dword [esp], eax
call fcn.05e310dd
jmp 0x5e3abdc
inc dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], 0x2092
jne 0x5e3b20c
call fcn.05e3ecec
sub dword [0x5e58178], 0x5776d68d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, dword [0x5e58178]
and eax, 0x40f9f97b
jmp 0x5e3b239
mov dword [esp], 0x2cc
call fcn.05e3c6c0
mov dword [eax], 0x10007
mov esi, eax
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x94]
mov dword [esp], eax
call fcn.05e310c9
mov eax, dword [ebx + 0x28]
add eax, dword [ebp - 0x8c]
mov dword [esi + 0xb0], eax
mov dword [esp + 4], esi
mov eax, dword [ebp - 0x94]
mov dword [esp], eax
call fcn.05e310d3
mov eax, dword [0x5e58178]
or eax, 0x729fc638
xor eax, 0x706b2c21
mov dword [0x5e58178], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0xa8]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x8c]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x2c]
add eax, 8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x98]
mov dword [esp], eax
call fcn.05e310bf
mov eax, dword [ebp - 0xac]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x94]
mov dword [esp], eax
call fcn.05e310dd
mov eax, dword [0x5e58178]
sub eax, 0x7d238f08
imul eax, eax, 0x15c612f
mov dword [0x5e58178], eax
mov dword [esp + 8], str.AslpPathWildcardAllocMatchNode_failed___x_
mov dword [esp + 4], str.A_IRQ_translator_failed_to_translate_resources.
mov dword [esp], str.No_more_files_were_found_which_match_the_file_specification.
call fcn.05e3df04
mov eax, dword [0x5e58178]
xor eax, 0x86caeb8e
sub eax, 0x24816ace
xor eax, 0x1ff3b547
mov dword [0x5e58178], eax
mov dword [esp + 8], str.Access_to_the_cloud_file_is_denied.
mov dword [esp + 4], str.Failed_to_read_text_to_match
mov dword [esp], str.AslpFileLargeEnsureLargeFileMapping
call fcn.05e3df04
mov dword [esp], esi
call fcn.05e3c6f0
mov eax, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret