Function at 0x10003dd0
Capabilities:
Check for debugger via api
Get common file path
Get system information on windows
Identify system language via api
Log keystrokes via polling
Manipulate console buffer
Open clipboard
Read .ini file
Read file on windows
Set environment variable
Set file attributes
Set uefi variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
push esi
cmp dword [0x1003fb04], 0x4d662ae5
jne 0x10003fa3
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDevicePowerState]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]
push 0x11d
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, 4
imul edx, ecx, 0xdb
mov ecx, dword [0x1005c2a8]
mov dword [ecx + edx], eax
mov dword [ebp - 0x38], 0x11fb
mov dword [ebp - 0x2c], 0
mov edx, 4
imul eax, edx, 0xdb
mov ecx, 4
imul edx, ecx, 0
mov ecx, dword [0x1005c2a8]
mov eax, dword [ecx + eax]
mov dword [edx + eax], 0x802dd192
mov dword [ebp - 0x60], 0
jmp 0x1000400e
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
cmp dword [ebp - 0x60], 0x5c
jge 0x1000401f
mov edx, dword [ebp - 0x2c]
sub edx, 8
mov dword [ebp - 0x2c], edx
jmp 0x10004005
mov dword [ebp - 8], 0x2188
mov dword [ebp - 0x1c], 0x12bd
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 8], eax
mov dword [ebp - 0x24], 0
mov ecx, dword [ebp - 0x24]
and ecx, 0x80000001
jns 0x1000404d
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000405c
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
jmp 0x1000403d
mov eax, dword [ebp - 0x1c]
add eax, 0x2124
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x28], 0xceb
mov dword [ebp - 0x68], 0
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x28]
add edx, 0x9cd
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xc], 0x13ad
mov dword [ebp - 0x64], 0
jmp 0x100040ba
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x64], 0x2e
jge 0x100040cb
mov edx, dword [ebp - 0xc]
add edx, 6
mov dword [ebp - 0xc], edx
jmp 0x100040b1
mov eax, dword [ebp - 0x24]
add eax, 0x1435
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x54], 0x99
mov ecx, dword [ebp - 0x54]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x44]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x54]
add eax, 0x69a
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x5c3
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 8]
sub edx, 0x7f4
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x68]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x54]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x44]
add eax, 0x1a9a
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0x4e2
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x23a1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x28]
and eax, 0x80000001
jns 0x1000415f
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000416e
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
jmp 0x10004150
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x44]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x54]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x2068
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x54]
add eax, 0xa58
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x2382
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 8]
sub eax, 0x2455
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x54]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0xe1d
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x44]
sub eax, 0xc13
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x16ec
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x68]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0xcd3
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0xc]
and edx, 0x80000001
jns 0x1000421a
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10004229
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x1000420a
mov ecx, dword [ebp - 0x38]
add ecx, 0x1a6c
mov dword [ebp - 0x38], ecx
mov edx, 4
imul eax, edx, 0xdb
mov ecx, 4
shl ecx, 0
mov edx, dword [0x1005c2a8]
mov eax, dword [edx + eax]
mov dword [ecx + eax], 0x2e86e680
mov ecx, dword [ebp - 8]
sub ecx, 0xa15
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x15a1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 8]
add edx, 0xebd
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100042de
cmp dword [ebp - 0x28], 0
jle 0x100042de
mov edx, dword [ebp - 0x28]
sub edx, 0x18e8
mov dword [ebp - 0x28], edx
jmp 0x100042e9
mov eax, dword [ebp - 0x28]
add eax, 0x18e8
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x18b0
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x54]
sub ecx, 0x3e
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0x1673
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x38]
sub eax, 0xea3
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x54]
sub ecx, 0x1de3
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x54]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x54]
add edx, 0x1fdc
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0xc]
add eax, 0x105b
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x54]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x44]
add eax, 0xc9c
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0xb4a
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x68]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 8]
add edx, 0x54d
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x2c]
and eax, 0x80000001
jns 0x100043c4
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x100043dc
cmp dword [ebp - 0x2c], 0
jle 0x100043dc
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x14f5
mov dword [ebp - 0x2c], ecx
jmp 0x100043e8
mov edx, dword [ebp - 0x2c]
add edx, 0x14f5
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x24]
add eax, 0x143d
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x12e3
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x40]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x44]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x1a5a
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x40]
sub ecx, 0x13ab
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x2653
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x1cc9
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0xb45
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
add edx, 0x110d
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x24], eax
mov ecx, 4
imul edx, ecx, 0xdb
mov eax, 4
shl eax, 1
mov ecx, dword [0x1005c2a8]
mov edx, dword [ecx + edx]
mov dword [eax + edx], 0x7544485d
mov eax, dword [ebp - 0x40]
sub eax, 0x253f
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x1da1
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100044fc
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
jmp 0x100044e2
mov eax, dword [ebp - 0x38]
add eax, 0x1a73
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, 0x7f4
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 8]
add edx, 0x1b9e
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 0x17d7
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x232a
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x44]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x1838
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100045a3
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x10004589
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0xda8
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x18f5
mov dword [ebp - 0x2c], edx
mov eax, 4
imul ecx, eax, 0xdb
mov edx, 4
imul eax, edx, 3
mov edx, dword [0x1005c2a8]
mov ecx, dword [edx + ecx]
mov dword [eax + ecx], 0x172155d0
mov edx, dword [ebp - 0x1c]
add edx, 0x1e50
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 8]
add eax, 0x148d
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x501
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, 0x1f30
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x6e8
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000466b
mov edx, dword [ebp - 0x44]
sub edx, 0x6c9
mov dword [ebp - 0x44], edx
jmp 0x10004676
mov eax, dword [ebp - 0x44]
add eax, 0x6c9
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x54]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x44]
mov dword [ebp - 0xc], edx
cmp dword [0x1003fb04], 0x4d662ae5
jne 0x100048df
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstVolumeW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleOriginalTitleW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
push 0
call dword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrencyFormatW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadFileEx]
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetScrollRange]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPreferredUILanguages]
push 0
call dword [sym.imp.KERNEL32.dll_CloseThreadpoolTimer]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_BuildCommDCBW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InflateRect]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjectsEx]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push 0
call dword [sym.imp.KERNEL32.dll_DisableThreadProfiling]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push 0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
push 0
push 0
push 0x10065d0c
push 0
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsEx]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesEx]
push 0
push 0
call dword [sym.imp.USER32.dll_GetSystemMenu]
push 0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ReuseDDElParam]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UnionRect]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObject]
push 0
call dword [sym.imp.USER32.dll_SetClipboardViewer]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AllocateUserPhysicalPages]
push 0
call dword [sym.imp.USER32.dll_GetMenu]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadpoolWaitEx]
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetMenuBarInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenEventW]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoExW]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x74], eax
push 0
mov ecx, dword [ebp - 0x74]
push ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadConsoleOutputCharacterW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCurrentConsoleFontEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapValidate]
push 0
push 0
call dword [sym.imp.USER32.dll_SetWindowPlacement]
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
push 0
call dword [sym.imp.KERNEL32.dll_StartThreadpoolIo]
push 0
push 0
call dword [sym.imp.USER32.dll_GetClassLongW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadpoolWaitEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueEx]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DdeSetQualityOfService]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x30], 0x2032
mov edx, dword [ebp - 0x58]
add edx, 0x13
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x4c], 0x2a5
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x3c], 0xc53
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x34], 0x985
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x48], 0x7c9
mov edx, dword [ebp - 0x48]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x50], 0xab8
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x50]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x50]
mov dword [ebp - 0x4c], edx
mov dword [ebp - 4], 0x255f
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x1196
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x6c], 0
jmp 0x10004992
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 0x1f
jge 0x100049a3
mov eax, dword [ebp - 0x50]
add eax, 2
mov dword [ebp - 0x50], eax
jmp 0x10004989
mov ecx, dword [ebp - 0x50]
sub ecx, dword [ebp - 0x48]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x100049cb
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x100049e1
cmp dword [ebp - 4], 0
jle 0x100049e1
mov ecx, dword [ebp - 4]
sub ecx, 0x831
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x20cd
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
and eax, 0x80000001
jns 0x100049fc
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10004a0b
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
jmp 0x100049ed
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 4]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x20], 0x1ad1
mov eax, dword [ebp - 0x58]
add eax, 0xa
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x70], 0
jmp 0x10004a3f
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x70], 0x4d
jge 0x10004a50
mov eax, dword [ebp - 0x5c]
add eax, 3
mov dword [ebp - 0x5c], eax
jmp 0x10004a36
mov ecx, dword [ebp - 0x4c]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x4c]
sub eax, 0x2638
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x155b
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x20]
and edx, 0x80000001
jns 0x10004a89
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10004a9e
cmp dword [ebp - 0x20], 0
jle 0x10004a9e
mov eax, dword [ebp - 0x20]
add eax, 0x6c
mov dword [ebp - 0x20], eax
jmp 0x10004aa7
mov ecx, dword [ebp - 0x20]
sub ecx, 0x6c
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x50]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x4c]
sub eax, 0x2684
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
add ecx, 0x182
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x58]
add edx, 5
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x48]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 4]
sub ecx, 0xdc5
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x48]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x10]
add eax, 0x3bd
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10004b62
cmp dword [ebp - 0x20], 0
jle 0x10004b62
mov edx, dword [ebp - 0x20]
add edx, 0x98c
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x34]
add eax, 0x1458
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x4c]
add ecx, 0x1269
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x30]
add edx, 0x2564
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0x1b3e
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x34]
and eax, 0x80000003
jns 0x10004bb2
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x10004bca
cmp dword [ebp - 0x34], 0
jle 0x10004bca
mov ecx, dword [ebp - 0x34]
sub ecx, 0x2648
mov dword [ebp - 0x34], ecx
jmp 0x10004bd6
mov edx, dword [ebp - 0x34]
add edx, 0x2648
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x5c]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x48]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x10]
and edx, 0x80000003
jns 0x10004bf8
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x10004c07
mov eax, dword [ebp - 0x10]
sub eax, 0x1e48
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x4c]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x1343
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x50]
sub eax, 0x1af3
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1dde
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x20]
add eax, 0x777
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x332
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x13d2
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x58]
add eax, 0x18
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x1fca
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x48]
sub ecx, 0x19ad
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x80000001
jns 0x10004ca2
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10004cb1
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
jmp 0x10004c92
mov ecx, dword [ebp - 0x10]
sub ecx, 0x1d9f
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x50]
add edx, 0x765
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x30]
add edx, 0x7c2
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x4d
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x7dd
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 4]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x48]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x21e9
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x7e6
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
and eax, 0x80000001
jns 0x10004d4d
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10004d5c
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
jmp 0x10004d3e
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x48]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x50]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x7f0
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x5c]
and ecx, 0x80000001
jns 0x10004d9b
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10004daa
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
jmp 0x10004d8b
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0xf7
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x48]
add edx, 0x12cb
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x50]
add edx, 0x1057
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x14]
sub eax, 0xe41
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x22a9
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 4]
and eax, 0x80000003
jns 0x10004e18
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x10004e30
cmp dword [ebp - 4], 0
jle 0x10004e30
mov ecx, dword [ebp - 4]
add ecx, 0x136e
mov dword [ebp - 4], ecx
jmp 0x10004e3c
mov edx, dword [ebp - 4]
sub edx, 0x136e
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x41c
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
and edx, 0x80000001
jns 0x10004e7b
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10004e8a
mov eax, dword [ebp - 0x14]
sub eax, 0xf29
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x2317
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x4c]
add eax, 0x62a
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x134a
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x58]
add edx, 3
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x48]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 4]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x18b9
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x50]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10004f12
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
jmp 0x10004ef8
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x3c]
add ecx, 0x2128
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x1543
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x1617
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x1228
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x1de5
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x34]
sub eax, 0x2410
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x48]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1776
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x3c]
add eax, 0x1d39
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0xcab
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0x2444
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x1c31
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x18]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x1789
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
sub eax, 0x1c17
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10005034
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
jmp 0x1000501a
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x10]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x1a08
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x4c]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x34]
add eax, 0x1d73
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
mov edx, 4
imul eax, edx, 0x9a
mov ecx, dword [0x1005c2a8]
mov edx, dword [ebp - 0x58]
mov dword [ecx + eax], edx
mov eax, 4
imul ecx, eax, 0xdb
mov edx, 4
shl edx, 1
mov eax, dword [0x1005c2a8]
mov ecx, dword [eax + ecx]
mov edx, dword [ecx + edx]
add edx, 0xc58a2
mov eax, 4
imul ecx, eax, 0xdb
mov eax, 4
shl eax, 1
mov esi, dword [0x1005c2a8]
mov ecx, dword [esi + ecx]
mov dword [eax + ecx], edx
cmp dword [0x1003fb04], 0x4d662ae5
jne 0x100052f7
push 0
push 0
call dword [sym.imp.USER32.dll_DdeFreeStringHandle]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Wow64GetThreadContext]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameW]
push 0
push 0
push 0
push 0x10065d44
call dword [sym.imp.KERNEL32.dll_FindFirstStreamW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaNodeProcessorMaskEx]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push 0
call dword [sym.imp.KERNEL32.dll_TryAcquireSRWLockExclusive]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UserHandleGrantAccess]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
call dword [sym.imp.USER32.dll_GetProcessWindowStation]
push 0
push 0
call dword [sym.imp.USER32.dll_ExcludeUpdateRgn]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CheckDlgButton]
push 0
call dword [sym.imp.USER32.dll_GetListBoxInfo]
push 0
call dword [sym.imp.USER32.dll_OpenClipboard]
push 0
push 0
call dword [sym.imp.USER32.dll_EnumPropsW]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UnpackDDElParam]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
push 0
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
push 0
push 0
call dword [sym.imp.USER32.dll_LoadIconW]
push 0
call dword [sym.imp.USER32.dll_IsImmersiveProcess]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamW]
push 0
call dword [sym.imp.USER32.dll_GetSysColor]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DdeCreateStringHandleW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TzSpecificLocalTimeToSystemTime]
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueueUserAPC]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddScopedPolicyIDAce]
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterPointerInputTargetEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FatalAppExitW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_AdjustWindowRect]
push 0
call dword [sym.imp.KERNEL32.dll_SetSystemTime]
call dword [sym.imp.KERNEL32.dll_GetErrorMode]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateBoundaryDescriptorW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerExW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessShutdownParameters]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ScrollWindow]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GlobalReAlloc]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFirmwareEnvironmentVariableExW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemWow64DirectoryW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetSystemFileCacheSize]
push 0
call dword [sym.imp.KERNEL32.dll_WakeConditionVariable]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowDisplayAffinity]
pop esi
mov esp, ebp
pop ebp
ret