Function at 0x5e71f040
Capabilities:
Link many functions at runtime
Print debug messages

Disassembly:
mov eax, esi
nop
nop
pop esi
mov eax, eax
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
mov dword [esi], ecx
call fcn.5e6caf7b
mov al, byte [ebp + 0x14]
mov byte [esi + 4], 1
nop
mov byte [esi + 5], al
pop esi
pop ebp
ret 0x10
nop
nop
nop
pop ecx
mov ecx, esi
pop esi
jmp fcn.5e6ea161
popal
outsd dx, dword [esi]
mov ah, al
dec ecx
cmp byte [ebp - 3], cl
mov bl, 0x33
sub esp, 0xae6c387e
pop esi
mov bl, 0x5b
and byte [edi - 0x20], dh
push 0xffffffffffffffc5
mov eax, 0x9f69b1e8
and dh, byte [ebx]
inc ebp
mov dl, 0xb0
ret
test word [0x61079226], 0x14fd
jns 0x5e71f085
daa
int3
js 0x5e71f075
lodsd eax, dword [esi]
aaa
ret 0xbbd8
fbstp tbyte [ecx - 0x5b116a58]
ret 0xe295
push ebp
mov eax, eax
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x610e8864]
cmp word [0x6107a23b], 0x9db5
js 0x5e6bbf32
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
cmp byte [0x6107ccd2], 0xc4
je 0x5e71f0e6
cmp byte [eax - 0x5b38c6fd], ch
push 0x3250e91a
xchg edx, eax
adc eax, 0x8662ab5
pop ss
mov edx, 0x928d695c
stosd dword es:[edi], eax
salc
jmp 0x5e71f058
mov ebx, dword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, ecx
push esi
push edi
mov eax, eax
mov dword [ebp - 0x1c], eax
xor esi, esi
mov eax, dword [ebp + 0xc]
cmp dword [0x60fee563], 0x643d4b1d
js 0x5e6ea12e
push esi
nop
mov dword [ebp - 0x20], eax
mov ecx, ecx
call ebx
mov edi, eax
mov dword [ebp - 0x18], edi
mov eax, eax
call fcn.5e714f1f
test dword [0x610d603f], 0xa69413b6
jo 0x5e6cf861
mov dword [ebp - 0x14], eax
cmp dword [0x610ed6c6], esi
jne 0x5e71f24b
nop
nop
nop
push 0x800
nop
push esi
nop
push str.USER32.DLL
test byte [0x610a727e], 0x43
jo 0x5e717b42
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
push edx
mov edx, edi
and edx, edi
pop edx
jne 0x5e71f191
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x5e71f3cf
push esi
push esi
push str.USER32.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
test edi, edi
je 0x5e71f3cf
push str.MessageBoxW
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x5e71f3cf
nop
push eax
mov eax, eax
call ebx
push str.GetActiveWindow
push edi
mov dword [0x610ed6c6], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, ecx
push eax
call ebx
cmp byte [0x6105b3fd], 0xce
js 0x5e71f1f7
cmp eax, 0xdb78a7fa
shl dword [edx], 0xf5
add dword [ecx + 0x1e4ed6d4], 0xffffff84
mov al, byte [0xed10926]
mov dr3, ebp
wait
mov esi, dword [edi + 0x6e]
js 0x5e71f17a
popfd
xchg edi, eax
lds esi, [ebx - 0x460532a8]
add al, byte [0xf99800b1]
sub ch, byte [eax - 0x44]
jbe 0x5e71f209
push str.GetLastActivePopup
popal
push edi
mov eax, eax
mov dword [0x610ed6ca], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
pop esi
push eax
call ebx
push str.GetUserObjectInformationW
push edi
mov dword [0x610ed6ce], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov eax, eax
push eax
mov eax, eax
call ebx
mov dword [0x610ed6d6], eax
push ecx
mov ecx, eax
and ecx, eax
pop ecx
je 0x5e71f248
push str.GetProcessWindowStation
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
nop
call ebx
nop
mov dword [0x610ed6d2], eax
mov edi, dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x5e71f277
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5e71f263
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
mov ecx, dword [ebp - 0x14]
sub ecx, esi
pop ecx
je 0x5e71f28d
nop
nop
push 4
pop eax
nop
jmp 0x5e71f3d3
cmp dword [ebp - 0x14], esi
je 0x5e71f28d
push dword [0x610ed6c6]
nop
call dword [sym.imp.KERNEL32.dll_DecodePointer]
push 3
jmp 0x5e71f270
test byte [0x6103ca99], 0xd7
js 0x5e71f2c1
sub bh, byte [edi + 0x4c]
wait
popal
dec esp
push esi
neg dword [0x8f7a7d92]
wait
mov cl, 0xdb
pop ss
add dh, byte [edi]
test al, 0x7d
and eax, 0xdd07a554
in al, 0x6b
lds esp, [ebp + ebx*4 + 0x5a]
test dword [esi + 0x13], edx
jle 0x5e71f2dc
stosd dword es:[edi], eax
add edi, dword [esi]
mov ch, 0xa7
mov eax, dword [0x610ed6d2]
mov ebx, dword [sym.imp.KERNEL32.dll_DecodePointer]
cmp eax, edi
je 0x5e71f343
cmp dword [0x610ed6d6], edi
je 0x5e71f343
mov ecx, ecx
push eax
call ebx
push dword [0x610ed6d6]
sar edi, cl
xor eax, 0x610ed6d6
mov dword [ebp - 0x14], eax
call ebx
mov ecx, dword [ebp - 0x14]
cmp word [0x610aaa56], 0xe7de
jne 0x5e7290f9
mov dword [ebp - 0x18], eax
test ecx, ecx
je 0x5e71f343
push edx
mov edx, eax
and edx, eax
pop edx
je 0x5e71f343
mov eax, eax
call ecx
test eax, eax
je 0x5e71f336
nop
lea ecx, [ebp - 0x24]
mov eax, eax
push ecx
mov ecx, ecx
push 0xc
lea ecx, [ebp - 0x10]
mov eax, eax
push ecx
push 1
push eax
call dword [ebp - 0x18]
push ecx
mov ecx, eax
and ecx, eax
pop ecx
je 0x5e71f336
test byte [ebp - 8], 1
jne 0x5e71f343
mov edi, dword [ebp + 0x10]
mov eax, eax
or edi, 0x200000
jmp 0x5e71f388
mov eax, dword [0x610ed6ca]
cmp eax, edi
je 0x5e71f383
push eax
mov ecx, ecx
call ebx
push ebx
mov ebx, eax
and ebx, eax
pop ebx
je 0x5e71f383
call eax
mov esi, eax
push edx
mov edx, esi
and edx, esi
pop edx
je 0x5e71f383
mov eax, eax
mov eax, dword [0x610ed6ce]
cmp eax, edi
je 0x5e71f383
nop
push eax
call ebx
push ecx
mov ecx, eax
and ecx, eax
pop ecx
je 0x5e71f383
push esi
call eax
mov eax, eax
mov esi, eax
nop
nop
mov edi, dword [ebp + 0x10]
nop
push dword [0x610ed6c6]
cmp word [0x60ff9ca0], 0xf7e5
jns 0x5e71f3bd
jbe 0x5e71f35e
mov ah, 0x6a
mov esi, 0x4b517fd8
cmp dword [edx - 0x71], esi
adc edx, dword [edx + 0x33]
adc esi, dword [eax + 0x56cc60c8]
add al, 0x29
sbb dh, ah
lds esi, [ebx - 0x1cc296eb]
fsubr st(4)
outsd dx, dword [esi]
test edi, edi
rol dword [ebp + 0x570c74c0], cl
call ebx
test eax, eax
je 0x5e71f3cf
push edi
push dword [ebp - 0x20]
push dword [ebp - 0x1c]
push esi
call eax
jmp 0x5e71f3d3
nop
nop
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
nop
nop
call int.5e712b26
mov esp, ebp
mov ecx, ecx
pop ebp
nop
nop
nop
ret
mov eax, eax
ret