Function at 0x10002030
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x10051648], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov edi, dword [0x10051660]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push edi
je 0x100020ba
call esi
test eax, eax
je 0x10002071
mov eax, dword [ebp - 4]
mov cx, word [0x10043088]
lea edx, [ebp - 4]
push edx
push eax
push 2
push edi
mov word [edi], cx
call esi
mov edi, dword [0x1005055c]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x1000209d
mov ecx, dword [ebp - 4]
mov dx, word [0x10043088]
lea eax, [ebp - 4]
push eax
push ecx
push 2
push edi
mov word [edi], dx
call esi
mov edi, dword [0x10050d50]
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x1000212e
mov ax, word [0x10043088]
jmp 0x1000211e
call esi
test eax, eax
je 0x100020d7
mov eax, dword [ebp - 4]
mov cx, word [0x10043090]
lea edx, [ebp - 4]
push edx
push eax
push 2
push edi
mov word [edi], cx
call esi
mov edi, dword [0x1005055c]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002103
mov ecx, dword [ebp - 4]
mov dx, word [0x10043090]
lea eax, [ebp - 4]
push eax
push ecx
push 2
push edi
mov word [edi], dx
call esi
mov edi, dword [0x10050d50]
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x1000212e
mov ax, word [0x10043090]
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 2
push edi
mov word [edi], ax
call esi
cmp dword [0x10051614], 0
mov edi, dword [0x10050548]
je 0x10002188
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002161
mov eax, dword [ebp - 4]
mov cl, byte [0x10043094]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x10051618]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100021d5
mov dl, byte [0x10043094]
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
mov byte [edi], dl
push ecx
jmp 0x100021d0
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100021ab
mov edx, dword [ebp - 4]
mov al, byte [0x100430e8]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10051618]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100021d5
mov cl, byte [0x100430e8]
mov eax, dword [ebp - 4]
lea edx, [ebp - 4]
push edx
mov byte [edi], cl
push eax
push 1
push edi
call esi
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x72
call ebx
test al, 1
je 0x10002931
mov edi, dword [0x10050d64]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002212
mov ecx, dword [ebp - 4]
mov dl, byte [0x10042948]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x10051638]
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x1000223d
mov edx, dword [ebp - 4]
mov ax, word [0x100430ec]
lea ecx, [ebp - 4]
push ecx
push edx
push 2
push edi
mov word [edi], ax
call esi
mov edi, dword [0x10051640]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002267
mov eax, dword [ebp - 4]
mov cl, byte [0x100430f0]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x100515ec]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002291
mov ecx, dword [ebp - 4]
mov dl, byte [0x100430f0]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x10050534]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100022ba
mov edx, dword [ebp - 4]
mov al, byte [0x100430f0]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050d60]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100022e4
mov eax, dword [ebp - 4]
mov cl, byte [0x100430f0]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x10050530]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x1000230e
mov ecx, dword [ebp - 4]
mov dl, byte [0x100430f0]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x10050d58]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002337
mov edx, dword [ebp - 4]
mov al, byte [0x100430f0]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x100515e8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002361
mov eax, dword [ebp - 4]
mov cl, byte [0x100430f0]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x10050d80]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x1000238b
mov ecx, dword [ebp - 4]
mov dl, byte [0x100430f0]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x10050d8c]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100023b4
mov edx, dword [ebp - 4]
mov al, byte [0x100430f0]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x1005054c]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x100023e0
mov eax, dword [ebp - 4]
mov cx, word [0x10043088]
lea edx, [ebp - 4]
push edx
push eax
push 2
push edi
mov word [edi], cx
call esi
mov edi, dword [0x10051600]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 0xe
push edi
call esi
test eax, eax
je 0x10002426
mov edx, dword [0x100430f4]
mov dword [edi], edx
mov eax, dword [0x100430f8]
mov dword [edi + 4], eax
mov ecx, dword [0x100430fc]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 4]
mov dx, word [0x10043100]
lea eax, [ebp - 4]
push eax
push ecx
push 0xe
push edi
mov word [edi + 0xc], dx
call esi
mov edi, dword [0x10051654]
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002451
mov edx, dword [ebp - 4]
mov ax, word [0x10043088]
lea ecx, [ebp - 4]
push ecx
push edx
push 2
push edi
mov word [edi], ax
call esi
mov edi, dword [0x10051620]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x1000247d
mov eax, dword [ebp - 4]
mov cx, word [0x10043088]
lea edx, [ebp - 4]
push edx
push eax
push 2
push edi
mov word [edi], cx
call esi
mov edi, dword [0x10051644]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x100024a9
mov ecx, dword [ebp - 4]
mov dx, word [0x10043088]
lea eax, [ebp - 4]
push eax
push ecx
push 2
push edi
mov word [edi], dx
call esi
mov edi, dword [0x100515f8]
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x100024d4
mov edx, dword [ebp - 4]
mov ax, word [0x10043088]
lea ecx, [ebp - 4]
push ecx
push edx
push 2
push edi
mov word [edi], ax
call esi
mov edi, dword [0x1005053c]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002500
mov eax, dword [ebp - 4]
mov cx, word [0x10043088]
lea edx, [ebp - 4]
push edx
push eax
push 2
push edi
mov word [edi], cx
call esi
mov edi, dword [0x100515d8]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x1000252a
mov ecx, dword [ebp - 4]
mov dl, byte [0x10043094]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x10050560]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002553
mov edx, dword [ebp - 4]
mov al, byte [0x10043094]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050da0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x1000257d
mov eax, dword [ebp - 4]
mov cl, byte [0x10043094]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x10050d6c]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100025a7
mov ecx, dword [ebp - 4]
mov dl, byte [0x10043094]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x100515c0]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100025d0
mov edx, dword [ebp - 4]
mov al, byte [0x10043094]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10051658]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100025fa
mov eax, dword [ebp - 4]
mov cl, byte [0x10043094]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x100515cc]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002624
mov ecx, dword [ebp - 4]
mov dl, byte [0x100430e8]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x100515cc]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x1000264d
mov edx, dword [ebp - 4]
mov al, byte [0x100430e8]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x100515cc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002677
mov eax, dword [ebp - 4]
mov cl, byte [0x100430e8]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x100515b0]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100026a1
mov ecx, dword [ebp - 4]
mov dl, byte [0x10043094]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x10050d88]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100026ca
mov edx, dword [ebp - 4]
mov al, byte [0x10043094]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x1005160c]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x100026f6
mov eax, dword [ebp - 4]
mov cx, word [0x10043088]
lea edx, [ebp - 4]
push edx
push eax
push 2
push edi
mov word [edi], cx
call esi
mov edi, dword [0x100515ac]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002722
mov ecx, dword [ebp - 4]
mov dx, word [0x10043088]
lea eax, [ebp - 4]
push eax
push ecx
push 2
push edi
mov word [edi], dx
call esi
mov edi, dword [0x10051604]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x1000274b
mov edx, dword [ebp - 4]
mov al, byte [0x10043094]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050d68]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002775
mov eax, dword [ebp - 4]
mov cl, byte [0x10043094]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x100515bc]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x1000279f
mov ecx, dword [ebp - 4]
mov dl, byte [0x10043094]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push 0x6b22c7
call esi
test eax, eax
je 0x100027d2
mov cx, word [0x10043088]
mov eax, 0x6b22c7
lea edx, [ebp - 4]
push edx
mov word [eax], cx
mov eax, dword [ebp - 4]
push eax
push 2
push 0x6b22c7
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push 0x91b5ea
call esi
test eax, eax
je 0x10002804
mov ax, word [0x10043088]
mov edx, 0x91b5ea
lea ecx, [ebp - 4]
push ecx
mov word [edx], ax
mov edx, dword [ebp - 4]
push edx
push 2
push 0x91b5ea
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x7eeb71
call esi
test eax, eax
je 0x10002837
mov dx, word [0x10043088]
mov ecx, 0x7eeb71
lea eax, [ebp - 4]
push eax
mov word [ecx], dx
mov ecx, dword [ebp - 4]
push ecx
push 2
push 0x7eeb71
call esi
mov edi, dword [0x100515f4]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002860
mov edx, dword [ebp - 4]
mov al, byte [0x10043094]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050d98]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x1000288a
mov eax, dword [ebp - 4]
mov cl, byte [0x10043094]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x1005057c]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100028b4
mov ecx, dword [ebp - 4]
mov dl, byte [0x10043094]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x100515c4]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100028dd
mov edx, dword [ebp - 4]
mov al, byte [0x10043094]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050d78]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002907
mov eax, dword [ebp - 4]
mov cl, byte [0x10043054]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x10051624]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002931
mov ecx, dword [ebp - 4]
mov dl, byte [0x10043054]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
push 0x73
call ebx
pop ebx
test al, 1
je 0x10003041
mov edi, dword [0x10050d64]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002967
mov edx, dword [ebp - 4]
mov al, byte [0x10043104]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10051638]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002993
mov eax, dword [ebp - 4]
mov cx, word [0x10043108]
lea edx, [ebp - 4]
push edx
push eax
push 2
push edi
mov word [edi], cx
call esi
mov edi, dword [0x10051640]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100029bd
mov ecx, dword [ebp - 4]
mov dl, byte [0x1004294c]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x100515ec]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x100029e6
mov edx, dword [ebp - 4]
mov al, byte [0x1004294c]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050534]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002a10
mov eax, dword [ebp - 4]
mov cl, byte [0x1004294c]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x10050d60]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002a3a
mov ecx, dword [ebp - 4]
mov dl, byte [0x1004294c]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x10050530]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002a63
mov edx, dword [ebp - 4]
mov al, byte [0x1004294c]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050d58]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002a8d
mov eax, dword [ebp - 4]
mov cl, byte [0x1004294c]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x100515e8]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002ab7
mov ecx, dword [ebp - 4]
mov dl, byte [0x1004294c]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x10050d80]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002ae0
mov edx, dword [ebp - 4]
mov al, byte [0x1004294c]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050d8c]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002b0a
mov eax, dword [ebp - 4]
mov cl, byte [0x1004294c]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x1005054c]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002b36
mov ecx, dword [ebp - 4]
mov dx, word [0x1004310c]
lea eax, [ebp - 4]
push eax
push ecx
push 2
push edi
mov word [edi], dx
call esi
mov edi, dword [0x10051654]
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002b61
mov edx, dword [ebp - 4]
mov ax, word [0x10043090]
lea ecx, [ebp - 4]
push ecx
push edx
push 2
push edi
mov word [edi], ax
call esi
mov edi, dword [0x10051620]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002b8d
mov eax, dword [ebp - 4]
mov cx, word [0x10043090]
lea edx, [ebp - 4]
push edx
push eax
push 2
push edi
mov word [edi], cx
call esi
mov edi, dword [0x10051644]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002bb9
mov ecx, dword [ebp - 4]
mov dx, word [0x10043090]
lea eax, [ebp - 4]
push eax
push ecx
push 2
push edi
mov word [edi], dx
call esi
mov edi, dword [0x100515f8]
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002be4
mov edx, dword [ebp - 4]
mov ax, word [0x10043090]
lea ecx, [ebp - 4]
push ecx
push edx
push 2
push edi
mov word [edi], ax
call esi
mov edi, dword [0x1005053c]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002c10
mov eax, dword [ebp - 4]
mov cx, word [0x10043090]
lea edx, [ebp - 4]
push edx
push eax
push 2
push edi
mov word [edi], cx
call esi
mov edi, dword [0x100515d8]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002c3a
mov ecx, dword [ebp - 4]
mov dl, byte [0x100430e8]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x10050560]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002c63
mov edx, dword [ebp - 4]
mov al, byte [0x100430e8]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050da0]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002c8d
mov eax, dword [ebp - 4]
mov cl, byte [0x100430e8]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x10050d6c]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002cb7
mov ecx, dword [ebp - 4]
mov dl, byte [0x100430e8]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x100515c0]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002ce0
mov edx, dword [ebp - 4]
mov al, byte [0x100430e8]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10051658]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002d0a
mov eax, dword [ebp - 4]
mov cl, byte [0x100430e8]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x100515cc]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002d34
mov ecx, dword [ebp - 4]
mov dl, byte [0x10043094]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x100515cc]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002d5d
mov edx, dword [ebp - 4]
mov al, byte [0x10043094]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x100515cc]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002d87
mov eax, dword [ebp - 4]
mov cl, byte [0x10043094]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x100515b0]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002db1
mov ecx, dword [ebp - 4]
mov dl, byte [0x100430e8]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x10050d88]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002dda
mov edx, dword [ebp - 4]
mov al, byte [0x100430e8]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x1005160c]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002e06
mov eax, dword [ebp - 4]
mov cx, word [0x10043090]
lea edx, [ebp - 4]
push edx
push eax
push 2
push edi
mov word [edi], cx
call esi
mov edi, dword [0x100515ac]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push edi
call esi
test eax, eax
je 0x10002e32
mov ecx, dword [ebp - 4]
mov dx, word [0x10043090]
lea eax, [ebp - 4]
push eax
push ecx
push 2
push edi
mov word [edi], dx
call esi
mov edi, dword [0x10051604]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002e5b
mov edx, dword [ebp - 4]
mov al, byte [0x100430e8]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050d68]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002e85
mov eax, dword [ebp - 4]
mov cl, byte [0x100430e8]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x100515bc]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002eaf
mov ecx, dword [ebp - 4]
mov dl, byte [0x100430e8]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push 0x6b22c7
call esi
test eax, eax
je 0x10002ee2
mov cx, word [0x10043090]
mov eax, 0x6b22c7
lea edx, [ebp - 4]
push edx
mov word [eax], cx
mov eax, dword [ebp - 4]
push eax
push 2
push 0x6b22c7
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push 0x91b5ea
call esi
test eax, eax
je 0x10002f14
mov ax, word [0x10043090]
mov edx, 0x91b5ea
lea ecx, [ebp - 4]
push ecx
mov word [edx], ax
mov edx, dword [ebp - 4]
push edx
push 2
push 0x91b5ea
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 2
push 0x7eeb71
call esi
test eax, eax
je 0x10002f47
mov dx, word [0x10043090]
mov ecx, 0x7eeb71
lea eax, [ebp - 4]
push eax
mov word [ecx], dx
mov ecx, dword [ebp - 4]
push ecx
push 2
push 0x7eeb71
call esi
mov edi, dword [0x100515f4]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002f70
mov edx, dword [ebp - 4]
mov al, byte [0x100430e8]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050d98]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002f9a
mov eax, dword [ebp - 4]
mov cl, byte [0x100430e8]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x1005057c]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002fc4
mov ecx, dword [ebp - 4]
mov dl, byte [0x100430e8]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov edi, dword [0x100515c4]
lea edx, [ebp - 4]
push edx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10002fed
mov edx, dword [ebp - 4]
mov al, byte [0x100430e8]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push edi
mov byte [edi], al
call esi
mov edi, dword [0x10050d78]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10003017
mov eax, dword [ebp - 4]
mov cl, byte [0x10043094]
lea edx, [ebp - 4]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov edi, dword [0x10051624]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push edi
call esi
test eax, eax
je 0x10003041
mov ecx, dword [ebp - 4]
mov dl, byte [0x10043094]
lea eax, [ebp - 4]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
pop edi
mov eax, 1
pop esi
mov esp, ebp
pop ebp
ret