Function at 0x5b99e0
Capabilities:
Check for time delay via gettickcount
Check mutex on windows
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x79032f
mov eax, dword fs:[0]
push eax
sub esp, 0x228
mov eax, dword [0x867e6c]
xor eax, esp
mov dword [esp + 0x1f0], eax
push ebx
push esi
push edi
mov eax, dword [0x867e6c]
xor eax, esp
push eax
lea eax, [esp + 0x238]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x6c], esi
call dword [sym.imp.kernel32.dll_GetCurrentThreadId]
mov ecx, dword [esi + 4]
mov dword [ecx + 0x398], eax
mov edx, dword [esi + 4]
xor ebx, ebx
cmp byte [edx + 0x39d], bl
jne 0x5ba501
cmp dword [0x88b5d0], ebx
je 0x5b9a5a
cmp dword [0x88b5d4], ebx
jne 0x5b9c81
push str.You_need_DirectX
lea ecx, [esp + 0x74]
call fcn.00403550
mov dword [esp + 0x240], ebx
push 0x10
mov edi, 0xf
push str.YOU_NEED_DIRECTX
lea ecx, [esp + 0xd8]
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
call fcn.004016e0
push str.This_application_requires_DirectX_to_run.__You_can_get_DirectX_at_http:__www.microsoft.com_directx
lea ecx, [esp + 0x128]
mov byte [esp + 0x244], 1
call fcn.00403550
mov byte [esp + 0x240], 2
push 0x14
push str.APP_REQUIRES_DIRECTX
lea ecx, [esp + 0xbc]
mov dword [esp + 0xd4], edi
mov dword [esp + 0xd0], ebx
mov byte [esp + 0xc0], bl
call fcn.004016e0
lea eax, [esp + 0x70]
mov byte [esp + 0x240], 3
mov ecx, dword [esi + 4]
push eax
lea eax, [esp + 0xd4]
lea ebx, [esp + 0x48]
call fcn.0046a250
mov edi, eax
lea ecx, [esp + 0x124]
mov byte [esp + 0x240], 4
push ecx
mov ecx, dword [esi + 4]
lea eax, [esp + 0xb8]
lea ebx, [esp + 0x90]
call fcn.0046a250
mov edx, 8
cmp dword [edi + 0x18], edx
jb 0x5b9b3c
mov ecx, dword [edi + 4]
jmp 0x5b9b3f
lea ecx, [edi + 4]
cmp dword [eax + 0x18], edx
jb 0x5b9b49
mov eax, dword [eax + 4]
jmp 0x5b9b4c
add eax, 4
push 0x10
push ecx
push eax
xor ebx, ebx
push ebx
call dword [sym.imp.user32.dll_MessageBoxW]
mov edi, 8
cmp dword [esp + 0xa4], edi
jb 0x5b9b77
mov edx, dword [esp + 0x90]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0xa4], 7
mov dword [esp + 0xa0], ebx
mov word [esp + 0x90], ax
cmp dword [esp + 0x5c], edi
jb 0x5b9ba6
mov ecx, dword [esp + 0x48]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
cmp dword [esp + 0xcc], 0x10
mov dword [esp + 0x5c], 7
mov dword [esp + 0x58], ebx
mov word [esp + 0x48], dx
jb 0x5b9bd3
mov eax, dword [esp + 0xb8]
push eax
call fcn.006441c7
add esp, 4
mov dword [esp + 0xcc], 0xf
mov dword [esp + 0xc8], ebx
mov byte [esp + 0xb8], bl
cmp dword [esp + 0x13c], edi
jb 0x5b9c05
mov ecx, dword [esp + 0x128]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
cmp dword [esp + 0xe8], 0x10
mov dword [esp + 0x13c], 7
mov dword [esp + 0x138], ebx
mov word [esp + 0x128], dx
jb 0x5b9c3b
mov eax, dword [esp + 0xd4]
push eax
call fcn.006441c7
add esp, 4
mov dword [esp + 0x240], 0xffffffff
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
cmp dword [esp + 0x88], edi
jb 0x5b9c75
mov ecx, dword [esp + 0x74]
push ecx
call fcn.006441c7
add esp, 4
mov edx, dword [esi]
mov eax, dword [edx + 0x1c]
push ebx
mov ecx, esi
call eax
xor ebx, ebx
mov ecx, dword [esi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x15c]
call eax
mov ecx, dword [esi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x4c]
call eax
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + 0x14]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [esi + 4]
cmp byte [ecx + 0x11a], bl
jne 0x5b9cb9
mov edx, dword [esi]
mov eax, dword [edx + 0x4c]
mov ecx, esi
call eax
mov eax, esi
call fcn.005aa140
test al, al
je 0x5b9ccd
mov ecx, dword [esi + 4]
mov byte [ecx + 0x11e], bl
cmp dword [0x8859cc], ebx
jne 0x5b9ce1
push ebx
call dword [sym.imp.kernel32.dll_GetModuleHandleA]
mov dword [0x8859cc], eax
mov eax, dword [esi + 4]
add eax, 0xb0
mov edi, 0x10
cmp dword [eax + 0x18], edi
jb 0x5b9cf8
mov eax, dword [eax + 4]
jmp 0x5b9cfb
add eax, 4
mov ecx, dword [esi + 4]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0xbc]
call eax
test al, al
jne 0x5b9d7d
mov eax, dword [esi + 4]
add eax, 0xb0
cmp dword [eax + 0x18], edi
jb 0x5b9d1f
mov eax, dword [eax + 4]
jmp 0x5b9d22
add eax, 4
push eax
call fcn.006657d0
mov edi, dword [esi + 4]
add esp, 4
add edi, 0xb0
xor al, al
lea ecx, [esp + 0x70]
call fcn.004396c0
mov dword [esp + 0x240], 5
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + 0x14]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x88]
call eax
mov dword [esp + 0x240], 0xffffffff
cmp dword [esp + 0x88], 0x10
jb 0x5b9d7d
mov ecx, dword [esp + 0x74]
push ecx
call fcn.006441c7
add esp, 4
call fcn.004786c0
mov edx, dword [esi + 4]
mov ecx, dword [edx + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x70]
push edx
call eax
push eax
mov edi, str.main.pak
lea esi, [esp + 0x48]
mov dword [esp + 0x244], 6
call fcn.00402fb0
add esp, 4
push eax
mov byte [esp + 0x244], 7
call fcn.00472250
mov esi, 0x10
cmp dword [esp + 0x5c], esi
jb 0x5b9dd7
mov ecx, dword [esp + 0x48]
push ecx
call fcn.006441c7
add esp, 4
mov dword [esp + 0x240], 0xffffffff
mov dword [esp + 0x5c], 0xf
mov dword [esp + 0x58], ebx
mov byte [esp + 0x48], bl
cmp dword [esp + 0x88], esi
jb 0x5b9e08
mov edx, dword [esp + 0x74]
push edx
call fcn.006441c7
add esp, 4
mov edi, dword [esp + 0x6c]
mov ebx, dword [edi + 4]
add ebx, 0x5c
lea eax, [esp + 0x70]
call fcn.00438cb0
mov ebx, 8
push eax
mov edx, str.Notify
lea esi, [esp + 0x48]
mov dword [esp + 0x244], ebx
call fcn.00406c30
add esp, 4
cmp dword [eax + 0x18], ebx
jb 0x5b9e43
mov eax, dword [eax + 4]
jmp 0x5b9e46
add eax, 4
push eax
call dword [sym.imp.user32.dll_RegisterClipboardFormatW]
mov ecx, dword [edi + 4]
mov dword [ecx + 0x120], eax
cmp dword [esp + 0x5c], ebx
jb 0x5b9e69
mov edx, dword [esp + 0x48]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x240], 0xffffffff
mov dword [esp + 0x5c], 7
mov dword [esp + 0x58], 0
mov word [esp + 0x48], ax
cmp dword [esp + 0x88], ebx
jb 0x5b9ea1
mov ecx, dword [esp + 0x74]
push ecx
call fcn.006441c7
add esp, 4
mov ebx, dword [edi + 4]
add ebx, 0x5c
lea eax, [esp + 0x70]
call fcn.00438cb0
mov edx, str.Mutex
mov ecx, eax
lea edi, [esp + 0x44]
mov dword [esp + 0x240], 9
call fcn.00410080
mov esi, 8
cmp dword [eax + 0x18], esi
jb 0x5b9eda
mov eax, dword [eax + 4]
jmp 0x5b9edd
add eax, 4
push eax
push 1
xor ebx, ebx
push ebx
call dword [sym.imp.kernel32.dll_CreateMutexW]
mov edi, dword [esp + 0x6c]
mov edx, dword [edi + 4]
mov dword [edx + 0x530], eax
cmp dword [esp + 0x5c], esi
jb 0x5b9f09
mov eax, dword [esp + 0x48]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0x240], 0xffffffff
mov dword [esp + 0x5c], 7
mov dword [esp + 0x58], ebx
mov word [esp + 0x48], cx
cmp dword [esp + 0x88], esi
jb 0x5b9f3d
mov edx, dword [esp + 0x74]
push edx
call fcn.006441c7
add esp, 4
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0xb7
jne 0x5b9f56
mov eax, dword [edi]
mov edx, dword [eax + 0x110]
mov ecx, edi
call edx
call dword [sym.imp.kernel32.dll_GetTickCount]
mov ecx, dword [edi + 4]
mov dword [ecx + 0x20], eax
mov edx, dword [edi + 4]
mov ecx, dword [edx + 0x20]
call fcn.00437c30
call dword [sym.imp.kernel32.dll_GetTickCount]
push eax
call fcn.006454ec
add esp, 4
call fcn.00437c40
push str.IDI_MAIN_ICON
test al, al
je 0x5ba087
mov eax, dword [edi + 4]
mov ecx, dword [0x8859cc]
mov byte [eax + 0x6c7], bl
push ecx
mov dword [esp + 0x4c], esi
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x64], ebx
call dword [sym.imp.user32.dll_LoadIconA]
mov edx, dword [0x8859cc]
mov esi, dword [sym.imp.user32.dll_RegisterClassA]
mov dword [esp + 0x58], eax
lea eax, [esp + 0x44]
push eax
mov dword [esp + 0x58], edx
mov dword [esp + 0x4c], 0x5b2420
mov dword [esp + 0x6c], 0x824e4c
mov dword [esp + 0x68], ebx
call esi
mov ecx, dword [edi + 4]
cmp dword [ecx + 0x5e8], ebx
jne 0x5ba1cb
mov edx, dword [0x8859cc]
lea eax, [esp + 0x44]
push eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x58], edx
mov dword [esp + 0x4c], 0x5b2420
mov dword [esp + 0x6c], 0x824e58
mov dword [esp + 0x68], ebx
call esi
mov ecx, dword [edi + 4]
add ecx, 0x78
push ecx
lea esi, [esp + 0x74]
call fcn.00438a80
add esp, 4
cmp dword [eax + 0x18], 0x10
jb 0x5ba051
mov eax, dword [eax + 4]
jmp 0x5ba054
add eax, 4
mov edx, dword [0x8859cc]
push ebx
push edx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push 0x824e58
push ebx
call dword [sym.imp.user32.dll_CreateWindowExA]
mov ecx, dword [edi + 4]
mov dword [ecx + 0x5e8], eax
lea ecx, [esp + 0x70]
call fcn.004012f0
jmp 0x5ba1b8
mov ecx, dword [edi + 4]
mov edx, dword [0x8859cc]
mov byte [ecx + 0x6c7], 1
push edx
mov dword [esp + 0x94], esi
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xac], ebx
call dword [sym.imp.user32.dll_LoadIconA]
mov esi, dword [sym.imp.user32.dll_RegisterClassW]
mov dword [esp + 0xa0], eax
mov eax, dword [0x8859cc]
lea ecx, [esp + 0x8c]
push ecx
mov dword [esp + 0xa0], eax
mov dword [esp + 0x94], 0x5b2420
mov dword [esp + 0xb4], str.MainWindow
mov dword [esp + 0xb0], ebx
call esi
mov edx, dword [edi + 4]
cmp dword [edx + 0x5e8], ebx
jne 0x5ba1cb
mov eax, dword [0x8859cc]
lea ecx, [esp + 0x8c]
push ecx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa0], eax
mov dword [esp + 0x94], 0x5b2420
mov dword [esp + 0xb4], str.InvisWindow
mov dword [esp + 0xb0], ebx
call esi
mov edx, dword [edi + 4]
add edx, 0x78
lea esi, [esp + 0x70]
call fcn.00438cd0
cmp dword [eax + 0x18], 8
jb 0x5ba187
mov eax, dword [eax + 4]
jmp 0x5ba18a
add eax, 4
mov edx, dword [0x8859cc]
push ebx
push edx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push str.InvisWindow
push ebx
call dword [sym.imp.user32.dll_CreateWindowExW]
mov ecx, dword [edi + 4]
mov dword [ecx + 0x5e8], eax
lea ecx, [esp + 0x70]
call fcn.00406fb0
mov edx, dword [edi + 4]
mov eax, dword [edx + 0x5e8]
push edi
push 0xffffffffffffffeb
push eax
call dword [sym.imp.user32.dll_SetWindowLongA]
mov ecx, dword [0x8859cc]
mov esi, dword [sym.imp.user32.dll_CreateCursor]
push 0x86b7c8
push 0x86b748
push 0x20
push 0x20
push 4
push 0xb
push ecx
call esi
mov edx, dword [edi + 4]
push 0x86b8c8
push 0x86b848
push 0x20
push 0x20
push 0xa
mov dword [edx + 0x5dc], eax
mov eax, dword [0x8859cc]
push 0xf
push eax
call esi
mov ecx, dword [edi + 4]
mov dword [ecx + 0x5e0], eax
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
call eax
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0xec]
mov edx, dword [eax + 0xe8]
mov eax, dword [eax + 0x358]
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xbc], edx
mov dword [esp + 0xc0], ecx
lea edx, [esp + 0xd0]
lea ecx, [esp + 0xb4]
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
call fcn.005801f0
mov ecx, dword [edi + 4]
cmp byte [ecx + 0x3a1], bl
je 0x5ba34b
push ebx
push 0x5a9f70
call dword [sym.imp.user32.dll_EnumWindows]
lea edx, [esp + 0x15c]
push edx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.user32.dll_EnumDisplaySettingsA]
mov ecx, dword [esp + 0x1c8]
mov eax, dword [edi + 4]
cmp ecx, dword [eax + 0xe8]
mov ecx, dword [esp + 0x1c4]
jne 0x5ba2e0
mov edx, dword [esp + 0x1cc]
cmp edx, dword [eax + 0xec]
jne 0x5ba2e0
cmp ecx, 0x10
je 0x5ba34b
cmp ecx, 0x20
je 0x5ba34b
mov edx, dword [eax + 0xe8]
mov dword [esp + 0x1c8], edx
mov eax, dword [eax + 0xec]
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x184], 0x580000
cmp ecx, 0x10
je 0x5ba325
cmp ecx, 0x20
je 0x5ba325
mov dword [esp + 0x1c4], 0x10
mov dword [esp + 0x184], 0x5c0000
push 4
lea ecx, [esp + 0x160]
push ecx
call dword [sym.imp.user32.dll_ChangeDisplaySettingsA]
test eax, eax
je 0x5ba34b
mov edx, dword [edi + 4]
mov byte [edx + 0x3a1], bl
mov eax, dword [edi + 4]
mov byte [eax + 0x39f], bl
mov edx, dword [edi]
mov eax, dword [edx + 0xfc]
mov ecx, edi
call eax
mov ecx, dword [edi + 4]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [edi + 4]
mov dword [ecx + 0x5d0], eax
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
fld qword [ecx + 0x100]
mov eax, dword [edx + 0xe0]
sub esp, 8
fstp qword [esp]
call eax
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x34]
call eax
mov ecx, dword [edi + 4]
mov dword [ecx + 0x3b4], eax
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
fld qword [ecx + 0xf8]
mov eax, dword [edx + 0xdc]
sub esp, 8
fstp qword [esp]
call eax
mov eax, edi
call fcn.005aa140
test al, al
je 0x5ba3c8
mov edx, dword [edi]
mov eax, dword [edx + 0x68]
push 0xb
mov ecx, edi
call eax
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x38]
call eax
xor ecx, ecx
push 0x15
mov word [esp + 0x110], cx
push str.English_United_States
lea ecx, [esp + 0x110]
mov dword [esp + 0x128], 7
mov dword [esp + 0x124], ebx
call fcn.00403a80
mov dword [esp + 0x240], 0xa
push 6
push str.LOCALE
lea ecx, [esp + 0xf4]
mov dword [esp + 0x10c], 0xf
mov dword [esp + 0x108], ebx
mov byte [esp + 0xf8], bl
call fcn.004016e0
lea edx, [esp + 0x108]
mov byte [esp + 0x240], 0xb
mov ecx, dword [edi + 4]
push edx
lea eax, [esp + 0xf0]
lea ebx, [esp + 0x144]
call fcn.0046a250
push eax
mov byte [esp + 0x244], 0xc
call fcn.005a3f90
mov esi, 8
add esp, 4
cmp dword [esp + 0x158], esi
jb 0x5ba48d
mov eax, dword [esp + 0x144]
push eax
call fcn.006441c7
add esp, 4
xor ebx, ebx
xor ecx, ecx
cmp dword [esp + 0x104], 0x10
mov dword [esp + 0x158], 7
mov dword [esp + 0x154], ebx
mov word [esp + 0x144], cx
jb 0x5ba4c5
mov edx, dword [esp + 0xf0]
push edx
call fcn.006441c7
add esp, 4
mov dword [esp + 0x104], 0xf
mov dword [esp + 0x100], ebx
mov byte [esp + 0xf0], bl
cmp dword [esp + 0x120], esi
jb 0x5ba4f7
mov eax, dword [esp + 0x10c]
push eax
call fcn.006441c7
add esp, 4
mov ecx, dword [edi + 4]
mov byte [ecx + 0x3a4], 1
mov ecx, dword [esp + 0x238]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1f0]
xor ecx, esp
call fcn.00643db8
mov esp, ebp
pop ebp
ret