Function at 0x5a2b60
Capabilities:
Link many functions at runtime

Disassembly:
push str.wtsapi32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x658ee0], eax
test eax, eax
jne 0x5a2b75
ret
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.WTSStopRemoteControlSession
push eax
call esi
push str.WTSStartRemoteControlSessionW
push dword [0x658ee0]
mov dword [0x658ef0], eax
call esi
push str.WTSStartRemoteControlSessionA
push dword [0x658ee0]
mov dword [0x658ef4], eax
call esi
push str.WTSConnectSessionW
push dword [0x658ee0]
mov dword [0x658ef8], eax
call esi
push str.WTSConnectSessionA
push dword [0x658ee0]
mov dword [0x658efc], eax
call esi
push str.WTSEnumerateServersW
push dword [0x658ee0]
mov dword [0x658f00], eax
call esi
push str.WTSEnumerateServersA
push dword [0x658ee0]
mov dword [0x658f04], eax
call esi
push str.WTSOpenServerW
push dword [0x658ee0]
mov dword [0x658f08], eax
call esi
push str.WTSOpenServerA
push dword [0x658ee0]
mov dword [0x658f0c], eax
call esi
push str.WTSOpenServerExW
push dword [0x658ee0]
mov dword [0x658f10], eax
call esi
push str.WTSOpenServerExA
push dword [0x658ee0]
mov dword [0x658f14], eax
call esi
push str.WTSCloseServer
push dword [0x658ee0]
mov dword [0x658f18], eax
call esi
push str.WTSEnumerateSessionsW
push dword [0x658ee0]
mov dword [0x658f1c], eax
call esi
push str.WTSEnumerateSessionsA
push dword [0x658ee0]
mov dword [0x658f20], eax
call esi
push str.WTSEnumerateSessionsExW
push dword [0x658ee0]
mov dword [0x658f24], eax
call esi
push str.WTSEnumerateSessionsExA
push dword [0x658ee0]
mov dword [0x658f28], eax
call esi
push str.WTSEnumerateProcessesW
push dword [0x658ee0]
mov dword [0x658f2c], eax
call esi
push str.WTSEnumerateProcessesA
push dword [0x658ee0]
mov dword [0x658f30], eax
call esi
push str.WTSTerminateProcess
push dword [0x658ee0]
mov dword [0x658f34], eax
call esi
push str.WTSQuerySessionInformationW
push dword [0x658ee0]
mov dword [0x658f38], eax
call esi
push str.WTSQuerySessionInformationA
push dword [0x658ee0]
mov dword [0x658f3c], eax
call esi
push str.WTSQueryUserConfigW
push dword [0x658ee0]
mov dword [0x658f40], eax
call esi
push str.WTSQueryUserConfigA
push dword [0x658ee0]
mov dword [0x658f44], eax
call esi
push str.WTSSetUserConfigW
push dword [0x658ee0]
mov dword [0x658f48], eax
call esi
push str.WTSSetUserConfigA
push dword [0x658ee0]
mov dword [0x658f4c], eax
call esi
push str.WTSSendMessageW
push dword [0x658ee0]
mov dword [0x658f50], eax
call esi
push str.WTSSendMessageA
push dword [0x658ee0]
mov dword [0x658f54], eax
call esi
push str.WTSDisconnectSession
push dword [0x658ee0]
mov dword [0x658f58], eax
call esi
push str.WTSLogoffSession
push dword [0x658ee0]
mov dword [0x658f5c], eax
call esi
push str.WTSShutdownSystem
push dword [0x658ee0]
mov dword [0x658f60], eax
call esi
push str.WTSWaitSystemEvent
push dword [0x658ee0]
mov dword [0x658f64], eax
call esi
push str.WTSVirtualChannelOpen
push dword [0x658ee0]
mov dword [0x658f68], eax
call esi
push str.WTSVirtualChannelOpenEx
push dword [0x658ee0]
mov dword [0x658f6c], eax
call esi
push str.WTSVirtualChannelClose
push dword [0x658ee0]
mov dword [0x658f70], eax
call esi
push str.WTSVirtualChannelRead
push dword [0x658ee0]
mov dword [0x658f74], eax
call esi
push str.WTSVirtualChannelWrite
push dword [0x658ee0]
mov dword [0x658f78], eax
call esi
push str.WTSVirtualChannelPurgeInput
push dword [0x658ee0]
mov dword [0x658f7c], eax
call esi
push str.WTSVirtualChannelPurgeOutput
push dword [0x658ee0]
mov dword [0x658f80], eax
call esi
push str.WTSVirtualChannelQuery
push dword [0x658ee0]
mov dword [0x658f84], eax
call esi
push str.WTSFreeMemory
push dword [0x658ee0]
mov dword [0x658f88], eax
call esi
mov dword [0x658f8c], eax
push str.WTSRegisterSessionNotification
push dword [0x658ee0]
call esi
push str.WTSUnRegisterSessionNotification
push dword [0x658ee0]
mov dword [0x658f90], eax
call esi
push str.WTSRegisterSessionNotificationEx
push dword [0x658ee0]
mov dword [0x658f94], eax
call esi
push str.WTSUnRegisterSessionNotificationEx
push dword [0x658ee0]
mov dword [0x658f98], eax
call esi
push str.WTSQueryUserToken
push dword [0x658ee0]
mov dword [0x658f9c], eax
call esi
push str.WTSFreeMemoryExW
push dword [0x658ee0]
mov dword [0x658fa0], eax
call esi
push str.WTSFreeMemoryExA
push dword [0x658ee0]
mov dword [0x658fa4], eax
call esi
push str.WTSEnumerateProcessesExW
push dword [0x658ee0]
mov dword [0x658fa8], eax
call esi
push str.WTSEnumerateProcessesExA
push dword [0x658ee0]
mov dword [0x658fac], eax
call esi
push str.WTSEnumerateListenersW
push dword [0x658ee0]
mov dword [0x658fb0], eax
call esi
push str.WTSEnumerateListenersA
push dword [0x658ee0]
mov dword [0x658fb4], eax
call esi
push str.WTSQueryListenerConfigW
push dword [0x658ee0]
mov dword [0x658fb8], eax
call esi
push str.WTSQueryListenerConfigA
push dword [0x658ee0]
mov dword [0x658fbc], eax
call esi
push str.WTSCreateListenerW
push dword [0x658ee0]
mov dword [0x658fc0], eax
call esi
push str.WTSCreateListenerA
push dword [0x658ee0]
mov dword [0x658fc4], eax
call esi
push str.WTSSetListenerSecurityW
push dword [0x658ee0]
mov dword [0x658fc8], eax
call esi
push str.WTSSetListenerSecurityA
push dword [0x658ee0]
mov dword [0x658fcc], eax
call esi
push str.WTSGetListenerSecurityW
push dword [0x658ee0]
mov dword [0x658fd0], eax
call esi
push str.WTSGetListenerSecurityA
push dword [0x658ee0]
mov dword [0x658fd4], eax
call esi
push str.WTSEnableChildSessions
push dword [0x658ee0]
mov dword [0x658fd8], eax
call esi
mov dword [0x658fdc], eax
push str.WTSIsChildSessionsEnabled
push dword [0x658ee0]
call esi
push str.WTSGetChildSessionId
push dword [0x658ee0]
mov dword [0x658fe0], eax
call esi
push str.WTSGetActiveConsoleSessionId
push dword [0x658ee0]
mov dword [0x658fe4], eax
call esi
push 0x658ee8
mov dword [0x658fe8], eax
call fcn.005a7a20
add esp, 4
mov dword [0x658edc], 0x658ee8
mov eax, 1
pop esi
ret