Function at 0x405f60
Capabilities:
Check for time delay via gettickcount

Disassembly:
sub esp, 0x5c
push ebx
push ebp
push esi
push edi
mov ebp, 0x12c0
mov ebx, 0x960
mov edi, 0x4b0
mov esi, ecx
push 0xa
mov dword [esp + 0x20], 0xe1000
mov dword [esp + 0x24], 0x70800
mov dword [esp + 0x28], 0x38400
mov dword [esp + 0x2c], 0x1c200
mov dword [esp + 0x30], 0xe100
mov dword [esp + 0x34], 0x9600
mov dword [esp + 0x38], 0x7080
mov dword [esp + 0x3c], 0x4b00
mov dword [esp + 0x40], 0x3840
mov dword [esp + 0x44], 0x2580
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], edi
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x32d8
mov ecx, esi
mov dword [esp + 0x18], eax
call fcn.00401720
push eax
push esi
call fcn.00401760
mov eax, dword [esi + 0x11c]
add esp, 8
shl eax, 5
mov ecx, dword [eax + 0x41b448]
shr ecx, 0xf
and ecx, 0xff
lea eax, [ecx - 1]
cmp eax, 0x1b
ja case.0x406028.3
xor edx, edx
mov dl, byte [eax + 0x406cf8]
jmp dword [edx*4 + 0x406cec]
mov eax, dword [esi + 0x1a4]
mov byte [esi + 0xaaa], 0x8f
cmp eax, 2
jne 0x4063e0
mov ebp, dword [esi + 0xe8]
fild dword [esi + 0x114]
mov dword [esp + 0x10], ebp
fild dword [esp + 0x10]
fdivr st(1)
fst dword [esp + 0x10]
fmul dword [0x424528]
fcomp dword [0x424524]
fnstsw ax
test ah, 0x41
jne 0x406313
fld dword [esp + 0x10]
fmul dword [0x424520]
fcomp dword [0x424524]
fnstsw ax
test ah, 0x41
jne 0x406246
fld dword [esp + 0x10]
fmul dword [0x42451c]
fcomp dword [0x424524]
fnstsw ax
test ah, 0x41
jne 0x406179
mov byte [esi + 0xaab], 0
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x424518]
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x424518]
fsub st(1)
fdivrp st(1)
fcom dword [0x42450c]
fnstsw ax
test ah, 0x41
jne 0x406100
fcomp dword [0x424508]
fnstsw ax
test ah, 1
jne 0x40610b
jmp 0x406102
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x4060b9
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x424518]
fcomp dword [0x424524]
fnstsw ax
test ah, 1
jne 0x406133
dec ecx
sub edx, 4
test ecx, ecx
jge 0x406114
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x40613f
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x40614f
cmp ebp, edi
jge 0x406151
mov edi, ebp
jmp 0x406151
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xe8], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x424518]
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x4064d4
mov byte [esi + 0xaab], 0x80
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x42451c]
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x42451c]
fsub st(1)
fdivrp st(1)
fcom dword [0x42450c]
fnstsw ax
test ah, 0x41
jne 0x4061cd
fcomp dword [0x424508]
fnstsw ax
test ah, 1
jne 0x4061d8
jmp 0x4061cf
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x406186
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x42451c]
fcomp dword [0x424524]
fnstsw ax
test ah, 1
jne 0x406200
dec ecx
sub edx, 4
test ecx, ecx
jge 0x4061e1
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x40620c
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x40621c
cmp ebp, edi
jge 0x40621e
mov edi, ebp
jmp 0x40621e
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xe8], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x42451c]
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x4064d4
mov byte [esi + 0xaab], 0x40
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x424520]
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x424520]
fsub st(1)
fdivrp st(1)
fcom dword [0x42450c]
fnstsw ax
test ah, 0x41
jne 0x40629a
fcomp dword [0x424508]
fnstsw ax
test ah, 1
jne 0x4062a5
jmp 0x40629c
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x406253
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x424520]
fcomp dword [0x424524]
fnstsw ax
test ah, 1
jne 0x4062cd
dec ecx
sub edx, 4
test ecx, ecx
jge 0x4062ae
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x4062d9
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x4062e9
cmp ebp, edi
jge 0x4062eb
mov edi, ebp
jmp 0x4062eb
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xe8], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x424520]
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x4064d4
mov byte [esi + 0xaab], 0xc0
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x424528]
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x424528]
fsub st(1)
fdivrp st(1)
fcom dword [0x42450c]
fnstsw ax
test ah, 0x41
jne 0x406367
fcomp dword [0x424508]
fnstsw ax
test ah, 1
jne 0x406372
jmp 0x406369
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x406320
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x424528]
fcomp dword [0x424524]
fnstsw ax
test ah, 1
jne 0x40639a
dec ecx
sub edx, 4
test ecx, ecx
jge 0x40637b
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x4063a6
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x4063b6
cmp ebp, edi
jge 0x4063b8
mov edi, ebp
jmp 0x4063b8
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xe8], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x424528]
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x4064d4
cmp eax, 3
jne 0x4064dc
fild dword [esi + 0x114]
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x424520]
fcom dword [0x424504]
fnstsw ax
test ah, 1
jne 0x406449
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x424520]
fsub st(1)
fdivrp st(1)
fcom dword [0x42450c]
fnstsw ax
test ah, 0x41
jne 0x40644b
fcomp dword [0x424508]
fnstsw ax
test ah, 1
jne 0x406456
jmp 0x40644d
fstp st(0)
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x4063f5
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x424520]
fcomp dword [0x424500]
fnstsw ax
test ah, 1
jne 0x40647e
dec ecx
sub edx, 4
test ecx, ecx
jge 0x40645f
mov eax, dword [esi + 0xe8]
mov edi, dword [esp + edi*4 + 0x1c]
cmp eax, edi
mov edx, eax
jl 0x406490
mov edx, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp edx, ecx
jle 0x4064a0
cmp eax, edi
jl 0x4064a2
mov eax, edi
jmp 0x4064a2
mov eax, ecx
mov dword [esp + 0x10], eax
mov dword [esi + 0xe8], eax
fidiv dword [esp + 0x10]
fmul dword [0x424520]
fadd qword [0x424510]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor ecx, ecx
mov cl, ah
mov byte [esi + 0xaab], cl
call sub.MSVCRT.dll__ftol
neg al
mov byte [esi + 0xaac], al
mov bl, byte [esi + 0xaab]
xor eax, eax
mov al, byte [esi + 0xaac]
or dl, 0xff
mov ecx, eax
mov eax, 0x100
sub eax, ecx
sub dl, bl
shl eax, 1
cmp eax, 0xfe
mov byte [esi + 0xaad], dl
jle 0x40650c
mov eax, 0xfe
mov ecx, dword [esi + 0xe4]
mov byte [esi + 0xaae], al
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [edx + edx*4]
shl eax, 2
cmp eax, 0xfa
jg 0x406549
cmp eax, 0x28
jge 0x406542
mov eax, 0x28
jmp 0x40654e
cmp eax, 0xfa
jle 0x40654e
mov eax, 0xfa
mov ecx, esi
mov byte [esi + 0xaaf], al
call fcn.004023f0
mov ecx, dword [esi + 0x178]
mov byte [esi + 0xab0], al
cmp ecx, 0x72
jl 0x406583
lea ecx, [esi + 0xaaa]
push 4
mov byte [esi + 0xaad], al
push ecx
mov byte [ecx], 1
jmp 0x406a9f
lea eax, [esi + 0xaaa]
push 7
push eax
mov ecx, esi
call fcn.00401db0
mov ecx, dword [esi + 0xe8]
push 0x8f
push ecx
mov ecx, esi
call fcn.00402210
push 0x1388
mov ecx, esi
call fcn.004021c0
push 1
push 0
mov ecx, esi
call fcn.00401f50
mov al, byte [esi + 0x23]
test al, al
je 0x406cd0
mov ecx, esi
call fcn.004021e0
test al, al
jne 0x406cdd
lea edx, [esi + 0x6aa]
push 1
push edx
mov ecx, esi
call fcn.00401f50
test al, al
je 0x4065bd
mov al, byte [esi + 0x25]
test al, al
je 0x406609
mov eax, dword [esi + 0x1c4]
test eax, eax
je 0x406609
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
cmp byte [esi + 0x6aa], 0x8f
je 0x40661f
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
mov eax, dword [esi + 0xe4]
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.00402210
lea eax, [esi + 0xaaa]
push 6
mov byte [eax], 0x8e
jmp 0x406a9e
cmp dword [esi + 0x178], 0x71
jge case.0x406028.3
mov eax, dword [esi + 0x114]
lea edi, [esi + 0xaaa]
cmp eax, 0x1312d00
mov dword [esp + 0x10], eax
mov byte [edi], 0x8e
jge 0x40669d
mov ecx, dword [esi + 0xe8]
mov byte [esi + 0xaab], 0x58
test ecx, ecx
mov byte [esi + 0xab2], 0x83
jne 0x406688
mov dword [esi + 0xe8], 0x7080
mov ecx, dword [esi + 0xe8]
cmp ecx, 0x7080
jl 0x4066d2
mov ecx, 0x7080
jmp 0x4066d2
mov ecx, dword [esi + 0xe8]
mov byte [esi + 0xaab], 0x98
test ecx, ecx
mov byte [esi + 0xab2], 0x81
jne 0x4066bf
mov dword [esi + 0xe8], 0xe100
mov ecx, dword [esi + 0xe8]
cmp ecx, 0xe100
jl 0x4066d2
mov ecx, 0xe100
mov dword [esi + 0xe8], ecx
mov cl, byte [esi + 0x6a4]
mov byte [esi + 0xaac], cl
mov ecx, dword [esi + 0xe8]
test ecx, ecx
jne 0x40670b
xor edx, edx
cmp eax, 0x1312d00
setge dl
dec edx
and edx, 0xffff8f80
add edx, 0xe100
mov dword [esi + 0xe8], edx
cdq
idiv dword [esi + 0xe8]
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
jne 0x406738
neg bl
mov byte [esi + 0xaad], 0
mov byte [esi + 0xaae], bl
jmp 0x406755
mov cl, dl
mov eax, ebx
inc cl
mov byte [esi + 0xaad], cl
and ecx, 0xff
cdq
idiv ecx
neg al
mov byte [esi + 0xaae], al
fild dword [esp + 0x10]
mov byte [esi + 0xaaf], 0x64
fmul dword [0x4244fc]
fsubr dword [0x4244f8]
call sub.MSVCRT.dll__ftol
and eax, 0xffff
xor ecx, ecx
mov cl, ah
push 0xc
mov byte [esi + 0xab0], cl
mov byte [esi + 0xab1], al
mov byte [esi + 0xab3], 0x20
mov byte [esi + 0xab4], 0xff
mov byte [esi + 0xab5], 0
push edi
jmp 0x406a9f
mov al, byte [esi + 0x6a5]
mov dl, byte [esi + 0x6a4]
mov byte [esi + 0xaac], al
mov eax, dword [esi + 0x1a4]
test eax, eax
mov byte [esi + 0xaaa], 1
mov byte [esi + 0xaab], dl
jne 0x406907
fild dword [esi + 0x114]
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fcom dword [0x4244f4]
fnstsw ax
test ah, 1
jne 0x406824
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fsub st(1)
fdivrp st(1)
fcom dword [0x42450c]
fnstsw ax
test ah, 0x41
jne 0x406826
fcomp dword [0x424508]
fnstsw ax
test ah, 1
jne 0x406831
jmp 0x406828
fstp st(0)
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x4067dc
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fcomp dword [0x4244f0]
fnstsw ax
test ah, 1
jne 0x406853
dec ecx
sub edx, 4
test ecx, ecx
jge 0x40683a
mov eax, dword [esi + 0xe8]
mov edi, dword [esp + edi*4 + 0x1c]
cmp eax, edi
mov edx, eax
jl 0x406865
mov edx, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp edx, ecx
jle 0x406879
cmp eax, edi
jge 0x406875
mov edx, eax
jmp 0x40687b
mov edx, edi
jmp 0x40687b
mov edx, ecx
cmp edx, 0x9600
jle 0x40688a
mov eax, 0x9600
jmp 0x4068a0
cmp eax, edi
mov edx, eax
jl 0x406892
mov edx, edi
cmp edx, ecx
jle 0x40689e
cmp eax, edi
jl 0x4068a0
mov eax, edi
jmp 0x4068a0
mov eax, ecx
mov dword [esp + 0x10], eax
mov dword [esi + 0xe8], eax
fidiv dword [esp + 0x10]
fld st(0)
fadd qword [0x424510]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor ecx, ecx
mov cl, ah
mov byte [esi + 0xaad], cl
call sub.MSVCRT.dll__ftol
fmul qword [0x4244e8]
neg al
mov byte [esi + 0xaae], al
fadd qword [0x424510]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor edx, edx
mov dl, ah
mov byte [esi + 0xaaf], dl
call sub.MSVCRT.dll__ftol
neg al
mov byte [esi + 0xab0], al
jmp 0x406a89
cmp eax, 1
jne 0x406a89
fild dword [esi + 0x114]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x68], edi
mov dword [esp + 0x1c], 0x1e8480
mov dword [esp + 0x20], 0x16e360
mov dword [esp + 0x24], 0xf4240
mov dword [esp + 0x28], 0xe1000
mov dword [esp + 0x2c], 0x7a120
mov dword [esp + 0x30], 0x70800
mov dword [esp + 0x34], 0x3d090
mov dword [esp + 0x38], 0x38400
mov dword [esp + 0x3c], 0x30d40
mov dword [esp + 0x40], 0x1c200
mov dword [esp + 0x44], 0x186a0
mov dword [esp + 0x48], 0xe100
mov dword [esp + 0x4c], 0x9600
mov dword [esp + 0x50], 0x7080
mov dword [esp + 0x54], 0x4b00
mov dword [esp + 0x58], 0x3840
mov dword [esp + 0x5c], 0x2580
mov dword [esp + 0x64], ebx
xor edi, edi
lea ebp, [esp + 0x1c]
fild dword [ebp]
fld st(1)
fdiv st(1)
fmul dword [0x4244e4]
fadd qword [0x424510]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x4244e4]
fsub st(1)
fdivrp st(1)
fcom dword [0x42450c]
fnstsw ax
test ah, 0x41
jne 0x4069f8
fcomp dword [0x424508]
fnstsw ax
test ah, 1
jne 0x406a03
jmp 0x4069fa
fstp st(0)
inc edi
add ebp, 4
cmp edi, 0x14
jb 0x4069b0
mov ecx, 0x13
lea edx, [esp + 0x68]
fild dword [edx]
fdivr st(1)
fmul dword [0x4244e4]
fcomp dword [0x424500]
fnstsw ax
test ah, 1
jne 0x406a2b
dec ecx
sub edx, 4
test ecx, ecx
jge 0x406a0c
mov eax, dword [esi + 0xe8]
mov edi, dword [esp + edi*4 + 0x1c]
cmp eax, edi
mov edx, eax
jl 0x406a3d
mov edx, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp edx, ecx
jle 0x406a4d
cmp eax, edi
jl 0x406a4f
mov eax, edi
jmp 0x406a4f
mov eax, ecx
mov dword [esp + 0x10], eax
mov dword [esi + 0xe8], eax
fidiv dword [esp + 0x10]
fmul dword [0x4244e4]
fadd qword [0x424510]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor ecx, ecx
mov cl, ah
mov byte [esi + 0xaad], cl
call sub.MSVCRT.dll__ftol
neg al
mov byte [esi + 0xaae], al
mov ecx, esi
call fcn.004023f0
mov byte [esi + 0xab1], al
push 8
lea eax, [esi + 0xaaa]
push eax
mov ecx, esi
call fcn.00401db0
cmp dword [esi + 0x1a0], 3
jge 0x406ac2
mov edx, dword [esi + 0xe8]
push 0x8e
push edx
mov ecx, esi
call fcn.00402210
push 0x1388
mov ecx, esi
call fcn.004021c0
push 1
push 0
mov ecx, esi
call fcn.00401f50
mov al, byte [esi + 0x23]
test al, al
je 0x406cd0
mov ecx, esi
call fcn.004021e0
test al, al
jne 0x406cdd
lea eax, [esi + 0x6aa]
push 1
push eax
mov ecx, esi
call fcn.00401f50
test al, al
je 0x406ad9
mov al, byte [esi + 0x25]
test al, al
je 0x406b25
mov eax, dword [esi + 0x1c4]
test eax, eax
je 0x406b25
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
mov eax, dword [esi + 0x1a0]
test eax, eax
jne 0x406b4d
mov cl, byte [esi + 0x6aa]
lea edi, [esi + 0x6aa]
cmp cl, 0x8e
je 0x406b86
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
cmp eax, 3
lea edi, [esi + 0x6aa]
jl 0x406b74
mov cl, byte [esi + 0xaaa]
mov dl, byte [edi]
and cl, 0xf
cmp dl, cl
je 0x406b86
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
cmp byte [edi], 0x84
je 0x406b86
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
cmp eax, 3
jl 0x406b9b
mov edx, dword [esi + 0xe8]
push 0xffffffffffffffff
push edx
mov ecx, esi
call fcn.00402210
mov eax, dword [esi + 0x1a0]
test eax, eax
jne 0x406c6b
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x11c]
xor ecx, ecx
shl eax, 5
mov byte [esi + 0xaaa], 0x80
mov byte [esi + 0xaab], 0
lea eax, [eax + 0x41b450]
mov byte [esi + 0xaac], 0
mov byte [esi + 0xaad], 0x36
mov byte [esi + 0xaae], 1
mov cl, byte [eax + 1]
xor ebx, ebx
mov byte [esi + 0xaaf], cl
mov dl, byte [eax]
mov byte [esi + 0xab0], dl
lea eax, [esi + 0xaaa]
push 7
push eax
mov ecx, esi
call fcn.00401db0
push 0x1388
mov ecx, esi
call fcn.004021c0
push 1
push 0
mov ecx, esi
call fcn.00401f50
mov al, byte [esi + 0x23]
test al, al
je 0x406cd0
mov ecx, esi
call fcn.004021e0
test al, al
jne 0x406cdd
push 1
push edi
mov ecx, esi
call fcn.00401f50
test al, al
je 0x406c1f
mov al, byte [esi + 0x25]
test al, al
je 0x406c5c
mov eax, dword [esi + 0x1c4]
test eax, eax
jne 0x406b79
cmp byte [edi], 0x80
jne 0x406b79
inc ebx
cmp ebx, 5
jl 0x406bf8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x18], 0
sub eax, ebx
sub esp, 8
mov dword [esp + 0x1c], eax
mov ecx, esi
fild qword [esp + 0x1c]
fmul dword [0x4244e0]
fstp qword [esp]
push 0x32d9
call fcn.00401720
push eax
push esi
call fcn.00401760
mov eax, dword [esi + 0xe8]
add esp, 0x10
mov ecx, esi
push eax
push 0x32da
call fcn.00401720
push eax
push esi
call fcn.00401760
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
add esp, 0x5c
ret
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
add esp, 0x5c
ret