Function at 0x5e1515
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x1c
push ebx
push ebp
push esi
mov esi, ecx
mov ecx, dword [0x6633d4]
push edi
mov eax, dword [ecx + 0x1dc]
cmp eax, 4
je 0x5e1545
cmp eax, 6
je 0x5e1545
cmp eax, 7
je 0x5e1545
cmp eax, 5
je 0x5e1545
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1c
ret 0x10
mov al, byte [esi + 0x16c]
mov edi, dword [ecx + 0x1e0]
xor ebx, ebx
mov dword [esp + 0x10], edi
test al, al
je 0x5e16ad
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x104]
mov ecx, dword [0x6633d4]
cmp dword [ecx + 0x1e0], 0x15
jne 0x5e15ba
cmp dword [esp + 0x38], ebx
jne 0x5e158b
cmp dword [esp + 0x3c], ebx
jne 0x5e158b
mov eax, 1
jmp 0x5e158d
xor eax, eax
mov ecx, dword [esi + 0x150]
mov edx, dword [esi]
push eax
mov eax, dword [esi + 0x154]
push eax
mov eax, dword [esi + 0x14c]
push ecx
mov ecx, dword [esi + 0x148]
push eax
push ecx
mov ecx, esi
call dword [edx + 0x12c]
mov ecx, dword [0x6633d4]
cmp edi, ebx
je 0x5e1665
cmp edi, 8
jne case.0x5e1832.6
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esi]
push 1
push eax
push ecx
mov ecx, esi
call dword [edx + 0x11c]
mov edx, dword [0x6633d4]
cmp dword [edx + 0x1e4], 1
jne case.0x5e1832.6
mov eax, dword [esi + 0x178]
mov edx, 4
mov byte [eax + 0x48], 2
mov dword [esi + 0x178], ebx
lea eax, [esi + 0x17c]
mov ecx, dword [eax]
cmp ecx, ebx
je 0x5e161b
mov byte [ecx + 0x48], 2
mov dword [eax], ebx
add eax, 4
dec edx
jne 0x5e160f
mov ecx, dword [0x6633d4]
push ebx
push 0xf
mov edx, dword [ecx]
call dword [edx + 0x10]
mov eax, dword [esi + 0x8d8]
cmp eax, ebx
je case.0x5e1832.6
mov ecx, dword [0x6633d4]
mov ax, word [eax + 0x9c]
push eax
mov edx, dword [ecx]
call dword [edx + 0x14]
mov dword [esi + 0x8d8], ebx
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
cmp dword [ecx + 0x1e4], 5
jne case.0x5e1832.6
mov eax, dword [esi + 0x40]
cmp eax, ebx
je 0x5e1696
mov edx, dword [eax]
push ebx
push ebx
push ebx
push esi
mov ecx, eax
call dword [edx + 0xc4]
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x20]
mov ecx, dword [0x6633d4]
mov edx, dword [ecx]
push 5
push ebx
call dword [edx + 0x10]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
mov ecx, esi
call fcn.004a2060
mov ecx, dword [0x6633d4]
push ebx
call fcn.0041f6c0
test eax, eax
je 0x5e16d0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1c
ret 0x10
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov ebp, dword [esp + 0x30]
xor ecx, ecx
test ax, ax
setl cl
test ebx, ebx
mov dword [esp + 0x14], ecx
jne 0x5e1700
mov eax, dword [esp + 0x38]
test eax, eax
je 0x5e1817
mov eax, dword [esp + 0x10]
cmp eax, 7
je 0x5e1817
cmp eax, 0x15
je 0x5e1817
push 0
lea edx, [esp + 0x1c]
push 0
push edx
push edi
push ebp
push 2
push 0x29
mov ecx, esi
call fcn.005e30f0
cmp al, 0x34
jne 0x5e17db
mov edx, dword [esp + 0x24]
mov al, byte [edx + 0x36]
test al, 1
je 0x5e1770
test al, 8
jne 0x5e1770
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x5e1762
test ebx, ebx
jne 0x5e1762
mov ecx, dword [esi + 0x10c]
call fcn.004adc20
mov eax, dword [esp + 0x24]
push ebx
push eax
jmp 0x5e17c7
mov ecx, dword [esi + 0x10c]
push edx
call fcn.004adc80
jmp 0x5e17d2
mov ecx, dword [esi + 0x10c]
mov eax, dword [ecx + 0x1a4]
test eax, eax
je 0x5e17a8
cmp dword [eax + 0xc], ecx
jne 0x5e1799
call fcn.004ae130
mov edx, dword [esp + 0x24]
mov ecx, dword [edx + 8]
cmp al, byte [ecx + 0x95]
je 0x5e17a8
mov ecx, dword [esi + 0x10c]
call fcn.004adc20
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x5e17c4
test ebx, ebx
jne 0x5e17c4
mov ecx, dword [esi + 0x10c]
push 1
push edx
call fcn.004ad9c0
jmp 0x5e17d2
push 1
push edx
mov ecx, dword [esi + 0x10c]
call fcn.004adaa0
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx + 0x20]
mov eax, dword [esp + 0x38]
mov ecx, dword [0x6633d4]
test eax, eax
jne 0x5e17fa
test ebx, ebx
jne 0x5e17fa
mov eax, dword [ecx + 0x28]
cmp word [eax + 0x8e0], 2
jne 0x5e181d
cmp dword [ecx + 0x1e4], 5
jne case.0x5e1832.6
mov eax, dword [esi + 0x40]
test eax, eax
je 0x5e1d65
jmp 0x5e1d45
mov ecx, dword [0x6633d4]
mov eax, dword [esp + 0x10]
cmp eax, 0x18
ja case.0x5e1832.6
xor edx, edx
mov dl, byte [eax + 0x5e20fc]
jmp dword [edx*4 + 0x5e20cc]
mov eax, dword [esi]
push edi
push ebp
mov ecx, esi
call dword [eax + 0x124]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
mov edx, dword [esi]
push 0
push edi
push ebp
mov ecx, esi
call dword [edx + 0x128]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x5e189e
test ebx, ebx
jne 0x5e189e
mov edx, dword [esi]
mov eax, 1
push eax
push edi
push ebp
mov ecx, esi
call dword [edx + 0x11c]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
mov edx, dword [esi]
xor eax, eax
push eax
push edi
push ebp
mov ecx, esi
call dword [edx + 0x11c]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
xor ebx, ebx
lea eax, [esp + 0x18]
push ebx
push ebx
push eax
push edi
push ebp
push 1
push 0x29
mov ecx, esi
call fcn.005e30f0
mov edx, dword [esi]
push 1
push edi
push ebp
mov ecx, esi
call dword [edx + 0x11c]
cmp al, 9
jne 0x5e1900
mov ecx, dword [esi + 0x10c]
call fcn.004adc20
mov eax, dword [esp + 0x24]
mov ecx, dword [esi + 0x10c]
push ebx
push eax
call fcn.004adaa0
mov ecx, dword [0x6633d4]
cmp dword [ecx + 0x1e4], 1
jne case.0x5e1832.6
mov edx, dword [esi + 0x178]
lea eax, [esi + 0x17c]
mov byte [edx + 0x48], 2
mov dword [esi + 0x178], ebx
mov edx, 4
mov ecx, dword [eax]
cmp ecx, ebx
je 0x5e193a
mov byte [ecx + 0x48], 2
mov dword [eax], ebx
add eax, 4
dec edx
jne 0x5e192e
mov ecx, dword [0x6633d4]
push ebx
push 0xf
mov eax, dword [ecx]
call dword [eax + 0x10]
mov eax, dword [esi + 0x8d8]
cmp eax, ebx
je case.0x5e1832.6
mov ecx, dword [0x6633d4]
mov ax, word [eax + 0x9c]
push eax
mov edx, dword [ecx]
call dword [edx + 0x14]
mov dword [esi + 0x8d8], ebx
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
mov ecx, dword [esi + 0x10c]
push 1
lea eax, [esp + 0x1c]
mov edx, dword [ecx + 0x1a4]
mov ecx, esi
push edx
push eax
push edi
push ebp
push 0
push 0x29
call fcn.005e30f0
cmp al, 0x34
jne case.0x5e1832.6
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x5e19c5
call fcn.0041abd0
mov bl, al
mov eax, dword [esp + 0x24]
jmp 0x5e19db
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x5e19d9
call fcn.00526c00
mov bl, al
mov eax, dword [esp + 0x24]
jmp 0x5e19db
mov bl, 0x14
mov ecx, dword [0x6633d4]
cmp dword [ecx + 0x1dc], 7
jne 0x5e1a73
mov edx, dword [eax + 8]
cmp byte [edx + 4], 0x50
jne 0x5e1a65
lea ebp, [eax + 0x1c8]
mov dword [esp + 0x38], 4
mov edi, dword [ebp]
test edi, edi
je 0x5e1a57
mov ecx, dword [edi + 0x18]
test ecx, ecx
je 0x5e1a28
call fcn.0041abd0
cmp bl, al
jb 0x5e1a4b
mov ecx, dword [edi + 0x18]
call fcn.0041abd0
mov bl, al
jmp 0x5e1a4b
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x5e1a44
call fcn.00526c00
cmp bl, al
jb 0x5e1a4b
mov ecx, dword [edi + 0x10]
call fcn.00526c00
mov bl, al
jmp 0x5e1a4b
cmp bl, 0x14
jb 0x5e1a4b
mov bl, 0x14
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x38]
add ebp, 4
dec ecx
mov dword [esp + 0x38], ecx
jne 0x5e1a05
test eax, eax
je 0x5e1a7a
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
jmp 0x5e1a7a
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x70]
test bl, bl
jne case.0x5e1832.6
mov eax, dword [esi]
push 2
mov ecx, esi
call dword [eax + 0x20]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
mov ecx, dword [esi + 0x10c]
push 1
lea eax, [esp + 0x1c]
mov edx, dword [ecx + 0x1a4]
mov ecx, esi
push edx
push eax
push edi
push ebp
push 0
push 0x29
call fcn.005e30f0
cmp al, 0x34
jne case.0x5e1832.6
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x5e1adb
call fcn.0041abd0
mov bl, al
mov eax, dword [esp + 0x24]
jmp 0x5e1af1
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x5e1aef
call fcn.00526c00
mov bl, al
mov eax, dword [esp + 0x24]
jmp 0x5e1af1
mov bl, 0x14
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
mov ecx, dword [esp + 0x24]
push 3
mov eax, dword [ecx]
call dword [eax + 0x64]
test bl, bl
jne case.0x5e1832.6
mov edx, dword [esi]
push 2
mov ecx, esi
call dword [edx + 0x20]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
mov ecx, dword [esi + 0x40]
test ecx, ecx
je case.0x5e1832.6
mov eax, dword [ecx]
push 0
push 0
push 0x11
push esi
call dword [eax + 0xc4]
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx + 0x20]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
mov eax, dword [esi + 0x10c]
push 1
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 0x1a4]
push ecx
push edx
push edi
push ebp
push 1
push 0x29
mov ecx, esi
call fcn.005e30f0
cmp al, 0x34
jne case.0x5e1832.6
mov ecx, dword [esi + 0x40]
test ecx, ecx
je 0x5e1bb2
mov edx, dword [esp + 0x24]
mov eax, dword [ecx]
push 0
push edx
push 0x10
push esi
call dword [eax + 0xc4]
mov eax, dword [esp + 0x24]
mov ecx, dword [esi + 0x10c]
push 1
push eax
call fcn.004adaa0
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx + 0x20]
mov ecx, dword [0x6633d4]
push 0
push 0
mov eax, dword [ecx]
call dword [eax + 0x10]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
push 1
lea ecx, [esp + 0x1c]
push 0
push ecx
push edi
push ebp
push 0
push 0x29
mov ecx, esi
call fcn.005e30f0
cmp al, 0x34
jne case.0x5e1832.6
mov eax, dword [esi + 0x10c]
mov ecx, dword [esp + 0x24]
cmp dword [eax + 0x1a4], ecx
je 0x5e1c1d
mov ecx, eax
call fcn.004adc20
mov edx, dword [esp + 0x24]
mov ecx, dword [esi + 0x10c]
push 1
push edx
call fcn.004adaa0
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
push 1
call dword [eax + 0x80]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
cmp eax, 6
jne 0x5e1c4a
mov edx, dword [ecx]
push 0
push 0
call dword [edx + 0x10]
mov ecx, dword [0x6633d4]
mov eax, dword [ecx + 0x28]
cmp word [eax + 0x8e0], 2
mov eax, dword [esi + 0x8bc]
jne 0x5e1d7d
cmp ebp, eax
jne 0x5e1c83
cmp edi, dword [esi + 0x8c0]
jne 0x5e1c83
mov ecx, dword [esi + 0x10c]
push 0
lea eax, [esp + 0x1c]
mov edx, dword [ecx + 0x1a4]
push edx
push eax
jmp 0x5e1c8c
push 0
lea ecx, [esp + 0x1c]
push 0
push ecx
push edi
push ebp
push 2
push 0x29
mov ecx, esi
call fcn.005e30f0
or ecx, 0xffffffff
cmp al, 0x34
mov dword [esi + 0x8bc], ecx
mov dword [esi + 0x8c0], ecx
jne 0x5e1d17
mov edx, dword [esp + 0x24]
mov al, byte [edx + 0x36]
test al, 1
je 0x5e1ce3
test al, 8
jne 0x5e1ce3
mov ecx, dword [esi + 0x10c]
cmp dword [ecx + 0x24c], 1
jle 0x5e1ce9
call fcn.004adc20
mov eax, dword [esp + 0x24]
mov ecx, dword [esi + 0x10c]
push 1
push eax
call fcn.004adaa0
jmp 0x5e1d00
mov ecx, dword [esi + 0x10c]
call fcn.004adc20
mov eax, dword [esp + 0x24]
mov ecx, dword [esi + 0x10c]
push 1
push eax
call fcn.004ad9c0
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx + 0x20]
mov dword [esi + 0x8bc], ebp
mov dword [esi + 0x8c0], edi
jmp 0x5e1d2b
mov ecx, dword [esi + 0x10c]
call fcn.004adc20
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x20]
mov ecx, dword [0x6633d4]
cmp dword [ecx + 0x1e4], 5
jne case.0x5e1832.6
mov eax, dword [esi + 0x40]
test eax, eax
je 0x5e1d65
mov edx, dword [eax]
push 0
push 0
push 0
push esi
mov ecx, eax
call dword [edx + 0xc4]
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x20]
mov ecx, dword [0x6633d4]
mov edx, dword [ecx]
push 5
push 0
call dword [edx + 0x10]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
cmp ebp, eax
jne 0x5e1d9f
cmp edi, dword [esi + 0x8c0]
jne 0x5e1d9f
mov eax, dword [esi + 0x10c]
push 1
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 0x1a4]
push ecx
push edx
jmp 0x5e1da8
push 1
lea eax, [esp + 0x1c]
push 0
push eax
push edi
push ebp
push 1
push 0x2a
mov ecx, esi
call fcn.005e30f0
mov bl, al
cmp bl, 0x34
jne 0x5e1dec
cmp ebp, dword [esi + 0x8bc]
jne 0x5e1dec
cmp edi, dword [esi + 0x8c0]
jne 0x5e1dec
mov ecx, dword [esi + 0x10c]
mov edx, dword [esp + 0x24]
cmp edx, dword [ecx + 0x1a4]
je 0x5e1dec
call fcn.004adc20
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x20]
or eax, 0xffffffff
cmp bl, 0x34
mov dword [esi + 0x8bc], eax
mov dword [esi + 0x8c0], eax
jne 0x5e1ff7
mov ecx, dword [0x6633d4]
mov eax, dword [ecx + 0x1dc]
cmp eax, 5
je 0x5e1e47
mov edx, dword [esi + 0x10c]
mov ecx, dword [edx + 0x24c]
test ecx, ecx
jle 0x5e1e47
cmp eax, 7
je 0x5e1e47
mov ecx, dword [esp + 0x14]
mov eax, dword [esi]
push ecx
push 0xffffffffffffffff
push 0
push edi
push ebp
mov ecx, esi
call dword [eax + 0x120]
test eax, eax
jne case.0x5e1832.6
mov ebx, dword [esp + 0x24]
mov al, byte [ebx + 0x36]
test al, 1
je 0x5e1e85
test al, 8
jne 0x5e1e85
mov ecx, dword [esi + 0x10c]
cmp dword [ecx + 0x24c], 1
jle case.0x5e1832.6
call fcn.004adc20
mov edx, dword [esp + 0x24]
mov ecx, dword [esi + 0x10c]
push 1
push edx
call fcn.004adaa0
jmp 0x5e1fd3
mov eax, dword [esi + 0x10c]
mov ecx, dword [ebx + 0xc]
cmp ecx, eax
je 0x5e1f6b
mov ecx, dword [eax + 0x24c]
test ecx, ecx
je 0x5e1f6b
mov ecx, dword [0x6633d4]
mov eax, dword [ecx + 0x1dc]
cmp eax, 5
je 0x5e1edb
cmp eax, 7
je 0x5e1edb
mov eax, dword [esp + 0x14]
mov edx, dword [esi]
push eax
push 0xffffffffffffffff
push 1
push edi
push ebp
mov ecx, esi
call dword [edx + 0x120]
test eax, eax
jne case.0x5e1832.6
mov ebx, dword [esp + 0x24]
mov ecx, dword [ebx + 8]
cmp byte [ecx + 0x95], 2
jb case.0x5e1832.6
mov edx, dword [esi + 0x110]
mov al, byte [edx + 0x8ecd]
test al, al
jne 0x5e1f2a
mov ebx, dword [esp + 0x24]
fld dword [ebx + 0x3c]
call fcn.005faa4c
fld dword [ebx + 0x38]
push eax
call fcn.005faa4c
push eax
mov eax, dword [esi + 0x10c]
mov ecx, dword [eax + 0x88]
call fcn.005deee0
cmp al, 0xf
jne case.0x5e1832.6
mov ecx, dword [esi + 0x10c]
call fcn.004adc20
mov ecx, dword [esp + 0x24]
push 1
push ecx
mov ecx, dword [esi + 0x10c]
call fcn.004ad9c0
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx + 0x20]
mov dword [esi + 0x8c0], edi
mov dword [esi + 0x8bc], ebp
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
mov eax, dword [ebx + 8]
cmp byte [eax + 0x95], 2
jb case.0x5e1832.6
mov ecx, dword [esi + 0x110]
mov al, byte [ecx + 0x8ecd]
test al, al
jne 0x5e1fb6
fld dword [ebx + 0x3c]
call fcn.005faa4c
fld dword [ebx + 0x38]
push eax
call fcn.005faa4c
push eax
mov eax, dword [esi + 0x10c]
mov ecx, dword [eax + 0x88]
call fcn.005deee0
cmp al, 0xf
jne case.0x5e1832.6
mov ecx, dword [esi + 0x10c]
call fcn.004adc20
mov edx, dword [esp + 0x24]
mov ecx, dword [esi + 0x10c]
push 1
push edx
call fcn.004ad9c0
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x20]
mov dword [esi + 0x8c0], edi
mov dword [esi + 0x8bc], ebp
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
cmp bl, 0x33
jne case.0x5e1832.6
mov ecx, dword [0x6633d4]
mov eax, dword [ecx + 0x1dc]
cmp eax, 5
je case.0x5e1832.6
cmp eax, 7
je case.0x5e1832.6
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x5e2047
mov edx, dword [esi]
push 0
push 0xffffffffffffffff
push 1
push edi
push ebp
mov ecx, esi
call dword [edx + 0x120]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10
mov ecx, dword [esi + 0x10c]
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [ecx]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea edx, [esp + 0x4c]
push 0xffffffffffffffff
push edx
lea edx, [esp + 0x58]
push edx
call dword [eax + 0xa8]
test al, al
je case.0x5e1832.6
mov eax, dword [0x6532b8]
test eax, eax
je case.0x5e1832.6
lea eax, [esp + 0x18]
mov ecx, esi
push eax
call fcn.005e3d60
mov eax, dword [esp + 0x1c]
mov ecx, dword [esi + 0x10c]
push 0x3f800000
push eax
mov eax, dword [esp + 0x20]
mov edx, dword [ecx]
push eax
call dword [edx + 0xdc]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 0
push 0
push 0
push ecx
push edx
push 0xb92
mov ecx, esi
call fcn.005e3e30
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret 0x10