Function at 0x4076e0
Capabilities:
Check for time delay via gettickcount

Disassembly:
sub esp, 0x5c
push ebx
push ebp
push esi
push edi
mov ebp, 0x12c0
mov ebx, 0x960
mov edi, 0x4b0
mov esi, ecx
push 0xa
mov dword [esp + 0x20], 0xe1000
mov dword [esp + 0x24], 0x70800
mov dword [esp + 0x28], 0x38400
mov dword [esp + 0x2c], 0x1c200
mov dword [esp + 0x30], 0xe100
mov dword [esp + 0x34], 0x9600
mov dword [esp + 0x38], 0x7080
mov dword [esp + 0x3c], 0x4b00
mov dword [esp + 0x40], 0x3840
mov dword [esp + 0x44], 0x2580
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], edi
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x5218
mov ecx, esi
mov dword [esp + 0x18], eax
call fcn.00402e90
push eax
push esi
call fcn.00402ed0
mov eax, dword [esi + 0x11c]
add esp, 8
shl eax, 5
mov ecx, dword [eax + 0x4216e8]
shr ecx, 0xf
and ecx, 0xff
lea eax, [ecx - 1]
cmp eax, 0x1b
ja case.0x4077a8.3
xor edx, edx
mov dl, byte [eax + 0x408478]
jmp dword [edx*4 + 0x40846c]
mov eax, dword [esi + 0x1a4]
mov byte [esi + 0xaae], 0x8f
cmp eax, 2
jne 0x407b60
mov ebp, dword [esi + 0xe8]
fild dword [esi + 0x114]
mov dword [esp + 0x10], ebp
fild dword [esp + 0x10]
fdivr st(1)
fst dword [esp + 0x10]
fmul dword [0x42a8e8]
fcomp dword [0x42a8e4]
fnstsw ax
test ah, 0x41
jne 0x407a93
fld dword [esp + 0x10]
fmul dword [0x42a8e0]
fcomp dword [0x42a8e4]
fnstsw ax
test ah, 0x41
jne 0x4079c6
fld dword [esp + 0x10]
fmul dword [0x42a8dc]
fcomp dword [0x42a8e4]
fnstsw ax
test ah, 0x41
jne 0x4078f9
mov byte [esi + 0xaaf], 0
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x42a8d8]
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x42a8d8]
fsub st(1)
fdivrp st(1)
fcom dword [0x42a8cc]
fnstsw ax
test ah, 0x41
jne 0x407880
fcomp dword [0x42a8c8]
fnstsw ax
test ah, 1
jne 0x40788b
jmp 0x407882
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x407839
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x42a8d8]
fcomp dword [0x42a8e4]
fnstsw ax
test ah, 1
jne 0x4078b3
dec ecx
sub edx, 4
test ecx, ecx
jge 0x407894
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x4078bf
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x4078cf
cmp ebp, edi
jge 0x4078d1
mov edi, ebp
jmp 0x4078d1
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xe8], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x42a8d8]
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x407c54
mov byte [esi + 0xaaf], 0x80
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x42a8dc]
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x42a8dc]
fsub st(1)
fdivrp st(1)
fcom dword [0x42a8cc]
fnstsw ax
test ah, 0x41
jne 0x40794d
fcomp dword [0x42a8c8]
fnstsw ax
test ah, 1
jne 0x407958
jmp 0x40794f
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x407906
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x42a8dc]
fcomp dword [0x42a8e4]
fnstsw ax
test ah, 1
jne 0x407980
dec ecx
sub edx, 4
test ecx, ecx
jge 0x407961
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x40798c
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x40799c
cmp ebp, edi
jge 0x40799e
mov edi, ebp
jmp 0x40799e
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xe8], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x42a8dc]
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x407c54
mov byte [esi + 0xaaf], 0x40
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x42a8e0]
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x42a8e0]
fsub st(1)
fdivrp st(1)
fcom dword [0x42a8cc]
fnstsw ax
test ah, 0x41
jne 0x407a1a
fcomp dword [0x42a8c8]
fnstsw ax
test ah, 1
jne 0x407a25
jmp 0x407a1c
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x4079d3
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x42a8e0]
fcomp dword [0x42a8e4]
fnstsw ax
test ah, 1
jne 0x407a4d
dec ecx
sub edx, 4
test ecx, ecx
jge 0x407a2e
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x407a59
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x407a69
cmp ebp, edi
jge 0x407a6b
mov edi, ebp
jmp 0x407a6b
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xe8], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x42a8e0]
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x407c54
mov byte [esi + 0xaaf], 0xc0
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x42a8e8]
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x42a8e8]
fsub st(1)
fdivrp st(1)
fcom dword [0x42a8cc]
fnstsw ax
test ah, 0x41
jne 0x407ae7
fcomp dword [0x42a8c8]
fnstsw ax
test ah, 1
jne 0x407af2
jmp 0x407ae9
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x407aa0
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x42a8e8]
fcomp dword [0x42a8e4]
fnstsw ax
test ah, 1
jne 0x407b1a
dec ecx
sub edx, 4
test ecx, ecx
jge 0x407afb
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x407b26
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x407b36
cmp ebp, edi
jge 0x407b38
mov edi, ebp
jmp 0x407b38
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xe8], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x42a8e8]
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x407c54
cmp eax, 3
jne 0x407c5c
fild dword [esi + 0x114]
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x42a8e0]
fcom dword [0x42a8c4]
fnstsw ax
test ah, 1
jne 0x407bc9
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x42a8e0]
fsub st(1)
fdivrp st(1)
fcom dword [0x42a8cc]
fnstsw ax
test ah, 0x41
jne 0x407bcb
fcomp dword [0x42a8c8]
fnstsw ax
test ah, 1
jne 0x407bd6
jmp 0x407bcd
fstp st(0)
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x407b75
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x42a8e0]
fcomp dword [0x42a8c0]
fnstsw ax
test ah, 1
jne 0x407bfe
dec ecx
sub edx, 4
test ecx, ecx
jge 0x407bdf
mov eax, dword [esi + 0xe8]
mov edi, dword [esp + edi*4 + 0x1c]
cmp eax, edi
mov edx, eax
jl 0x407c10
mov edx, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp edx, ecx
jle 0x407c20
cmp eax, edi
jl 0x407c22
mov eax, edi
jmp 0x407c22
mov eax, ecx
mov dword [esp + 0x10], eax
mov dword [esi + 0xe8], eax
fidiv dword [esp + 0x10]
fmul dword [0x42a8e0]
fadd qword [0x42a8d0]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor ecx, ecx
mov cl, ah
mov byte [esi + 0xaaf], cl
call sub.MSVCRT.dll__ftol
neg al
mov byte [esi + 0xab0], al
mov bl, byte [esi + 0xaaf]
xor eax, eax
mov al, byte [esi + 0xab0]
or dl, 0xff
mov ecx, eax
mov eax, pe_nt_image_headers32
sub eax, ecx
sub dl, bl
shl eax, 1
cmp eax, 0xfe
mov byte [esi + 0xab1], dl
jle 0x407c8c
mov eax, 0xfe
mov ecx, dword [esi + 0xe4]
mov byte [esi + 0xab2], al
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [edx + edx*4]
shl eax, 2
cmp eax, 0xfa
jg 0x407cc9
cmp eax, 0x28
jge 0x407cc2
mov eax, 0x28
jmp 0x407cce
cmp eax, 0xfa
jle 0x407cce
mov eax, 0xfa
mov ecx, esi
mov byte [esi + 0xab3], al
call fcn.00403b60
mov ecx, dword [esi + 0x178]
mov byte [esi + 0xab4], al
cmp ecx, 0x72
jl 0x407d03
lea ecx, [esi + 0xaae]
push 4
mov byte [esi + 0xab1], al
push ecx
mov byte [ecx], 1
jmp 0x40821f
lea eax, [esi + 0xaae]
push 7
push eax
mov ecx, esi
call fcn.00403520
mov ecx, dword [esi + 0xe8]
push 0x8f
push ecx
mov ecx, esi
call fcn.00403980
push 0x1388
mov ecx, esi
call fcn.00403930
push 1
push 0
mov ecx, esi
call fcn.004036c0
mov al, byte [esi + 0x23]
test al, al
je 0x408450
mov ecx, esi
call fcn.00403950
test al, al
jne 0x40845d
lea edx, [esi + 0x6ae]
push 1
push edx
mov ecx, esi
call fcn.004036c0
test al, al
je 0x407d3d
mov al, byte [esi + 0x25]
test al, al
je 0x407d89
mov eax, dword [esi + 0x1c4]
test eax, eax
je 0x407d89
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
cmp byte [esi + 0x6ae], 0x8f
je 0x407d9f
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
mov eax, dword [esi + 0xe4]
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.00403980
lea eax, [esi + 0xaae]
push 6
mov byte [eax], 0x8e
jmp 0x40821e
cmp dword [esi + 0x178], 0x71
jge case.0x4077a8.3
mov eax, dword [esi + 0x114]
lea edi, [esi + 0xaae]
cmp eax, 0x1312d00
mov dword [esp + 0x10], eax
mov byte [edi], 0x8e
jge 0x407e1d
mov ecx, dword [esi + 0xe8]
mov byte [esi + 0xaaf], 0x58
test ecx, ecx
mov byte [esi + 0xab6], 0x83
jne 0x407e08
mov dword [esi + 0xe8], 0x7080
mov ecx, dword [esi + 0xe8]
cmp ecx, 0x7080
jl 0x407e52
mov ecx, 0x7080
jmp 0x407e52
mov ecx, dword [esi + 0xe8]
mov byte [esi + 0xaaf], 0x98
test ecx, ecx
mov byte [esi + 0xab6], 0x81
jne 0x407e3f
mov dword [esi + 0xe8], 0xe100
mov ecx, dword [esi + 0xe8]
cmp ecx, 0xe100
jl 0x407e52
mov ecx, 0xe100
mov dword [esi + 0xe8], ecx
mov cl, byte [esi + 0x6a8]
mov byte [esi + 0xab0], cl
mov ecx, dword [esi + 0xe8]
test ecx, ecx
jne 0x407e8b
xor edx, edx
cmp eax, 0x1312d00
setge dl
dec edx
and edx, 0xffff8f80
add edx, 0xe100
mov dword [esi + 0xe8], edx
cdq
idiv dword [esi + 0xe8]
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
jne 0x407eb8
neg bl
mov byte [esi + 0xab1], 0
mov byte [esi + 0xab2], bl
jmp 0x407ed5
mov cl, dl
mov eax, ebx
inc cl
mov byte [esi + 0xab1], cl
and ecx, 0xff
cdq
idiv ecx
neg al
mov byte [esi + 0xab2], al
fild dword [esp + 0x10]
mov byte [esi + 0xab3], 0x64
fmul dword [0x42a8bc]
fsubr dword [0x42a8b8]
call sub.MSVCRT.dll__ftol
and eax, 0xffff
xor ecx, ecx
mov cl, ah
push 0xc
mov byte [esi + 0xab4], cl
mov byte [esi + 0xab5], al
mov byte [esi + 0xab7], 0x20
mov byte [esi + 0xab8], 0xff
mov byte [esi + 0xab9], 0
push edi
jmp 0x40821f
mov al, byte [esi + 0x6a9]
mov dl, byte [esi + 0x6a8]
mov byte [esi + 0xab0], al
mov eax, dword [esi + 0x1a4]
test eax, eax
mov byte [esi + 0xaae], 1
mov byte [esi + 0xaaf], dl
jne 0x408087
fild dword [esi + 0x114]
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fcom dword [0x42a8b4]
fnstsw ax
test ah, 1
jne 0x407fa4
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fsub st(1)
fdivrp st(1)
fcom dword [0x42a8cc]
fnstsw ax
test ah, 0x41
jne 0x407fa6
fcomp dword [0x42a8c8]
fnstsw ax
test ah, 1
jne 0x407fb1
jmp 0x407fa8
fstp st(0)
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x407f5c
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fcomp dword [0x42a8b0]
fnstsw ax
test ah, 1
jne 0x407fd3
dec ecx
sub edx, 4
test ecx, ecx
jge 0x407fba
mov eax, dword [esi + 0xe8]
mov edi, dword [esp + edi*4 + 0x1c]
cmp eax, edi
mov edx, eax
jl 0x407fe5
mov edx, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp edx, ecx
jle 0x407ff9
cmp eax, edi
jge 0x407ff5
mov edx, eax
jmp 0x407ffb
mov edx, edi
jmp 0x407ffb
mov edx, ecx
cmp edx, 0x9600
jle 0x40800a
mov eax, 0x9600
jmp 0x408020
cmp eax, edi
mov edx, eax
jl 0x408012
mov edx, edi
cmp edx, ecx
jle 0x40801e
cmp eax, edi
jl 0x408020
mov eax, edi
jmp 0x408020
mov eax, ecx
mov dword [esp + 0x10], eax
mov dword [esi + 0xe8], eax
fidiv dword [esp + 0x10]
fld st(0)
fadd qword [0x42a8d0]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor ecx, ecx
mov cl, ah
mov byte [esi + 0xab1], cl
call sub.MSVCRT.dll__ftol
fmul qword [0x42a8a8]
neg al
mov byte [esi + 0xab2], al
fadd qword [0x42a8d0]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor edx, edx
mov dl, ah
mov byte [esi + 0xab3], dl
call sub.MSVCRT.dll__ftol
neg al
mov byte [esi + 0xab4], al
jmp 0x408209
cmp eax, 1
jne 0x408209
fild dword [esi + 0x114]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x68], edi
mov dword [esp + 0x1c], 0x1e8480
mov dword [esp + 0x20], 0x16e360
mov dword [esp + 0x24], 0xf4240
mov dword [esp + 0x28], 0xe1000
mov dword [esp + 0x2c], 0x7a120
mov dword [esp + 0x30], 0x70800
mov dword [esp + 0x34], 0x3d090
mov dword [esp + 0x38], 0x38400
mov dword [esp + 0x3c], 0x30d40
mov dword [esp + 0x40], 0x1c200
mov dword [esp + 0x44], 0x186a0
mov dword [esp + 0x48], 0xe100
mov dword [esp + 0x4c], 0x9600
mov dword [esp + 0x50], 0x7080
mov dword [esp + 0x54], 0x4b00
mov dword [esp + 0x58], 0x3840
mov dword [esp + 0x5c], 0x2580
mov dword [esp + 0x64], ebx
xor edi, edi
lea ebp, [esp + 0x1c]
fild dword [ebp]
fld st(1)
fdiv st(1)
fmul dword [0x42a8a4]
fadd qword [0x42a8d0]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x42a8a4]
fsub st(1)
fdivrp st(1)
fcom dword [0x42a8cc]
fnstsw ax
test ah, 0x41
jne 0x408178
fcomp dword [0x42a8c8]
fnstsw ax
test ah, 1
jne 0x408183
jmp 0x40817a
fstp st(0)
inc edi
add ebp, 4
cmp edi, 0x14
jb 0x408130
mov ecx, 0x13
lea edx, [esp + 0x68]
fild dword [edx]
fdivr st(1)
fmul dword [0x42a8a4]
fcomp dword [0x42a8c0]
fnstsw ax
test ah, 1
jne 0x4081ab
dec ecx
sub edx, 4
test ecx, ecx
jge 0x40818c
mov eax, dword [esi + 0xe8]
mov edi, dword [esp + edi*4 + 0x1c]
cmp eax, edi
mov edx, eax
jl 0x4081bd
mov edx, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp edx, ecx
jle 0x4081cd
cmp eax, edi
jl 0x4081cf
mov eax, edi
jmp 0x4081cf
mov eax, ecx
mov dword [esp + 0x10], eax
mov dword [esi + 0xe8], eax
fidiv dword [esp + 0x10]
fmul dword [0x42a8a4]
fadd qword [0x42a8d0]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor ecx, ecx
mov cl, ah
mov byte [esi + 0xab1], cl
call sub.MSVCRT.dll__ftol
neg al
mov byte [esi + 0xab2], al
mov ecx, esi
call fcn.00403b60
mov byte [esi + 0xab5], al
push 8
lea eax, [esi + 0xaae]
push eax
mov ecx, esi
call fcn.00403520
cmp dword [esi + 0x1a0], 3
jge 0x408242
mov edx, dword [esi + 0xe8]
push 0x8e
push edx
mov ecx, esi
call fcn.00403980
push 0x1388
mov ecx, esi
call fcn.00403930
push 1
push 0
mov ecx, esi
call fcn.004036c0
mov al, byte [esi + 0x23]
test al, al
je 0x408450
mov ecx, esi
call fcn.00403950
test al, al
jne 0x40845d
lea eax, [esi + 0x6ae]
push 1
push eax
mov ecx, esi
call fcn.004036c0
test al, al
je 0x408259
mov al, byte [esi + 0x25]
test al, al
je 0x4082a5
mov eax, dword [esi + 0x1c4]
test eax, eax
je 0x4082a5
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
mov eax, dword [esi + 0x1a0]
test eax, eax
jne 0x4082cd
mov cl, byte [esi + 0x6ae]
lea edi, [esi + 0x6ae]
cmp cl, 0x8e
je 0x408306
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
cmp eax, 3
lea edi, [esi + 0x6ae]
jl 0x4082f4
mov cl, byte [esi + 0xaae]
mov dl, byte [edi]
and cl, 0xf
cmp dl, cl
je 0x408306
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
cmp byte [edi], 0x84
je 0x408306
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x5c
ret
cmp eax, 3
jl 0x40831b
mov edx, dword [esi + 0xe8]
push 0xffffffffffffffff
push edx
mov ecx, esi
call fcn.00403980
mov eax, dword [esi + 0x1a0]
test eax, eax
jne 0x4083eb
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x11c]
xor ecx, ecx
shl eax, 5
mov byte [esi + 0xaae], 0x80
mov byte [esi + 0xaaf], 0
lea eax, [eax + 0x4216f0]
mov byte [esi + 0xab0], 0
mov byte [esi + 0xab1], 0x36
mov byte [esi + 0xab2], 1
mov cl, byte [eax + 1]
xor ebx, ebx
mov byte [esi + 0xab3], cl
mov dl, byte [eax]
mov byte [esi + 0xab4], dl
lea eax, [esi + 0xaae]
push 7
push eax
mov ecx, esi
call fcn.00403520
push 0x1388
mov ecx, esi
call fcn.00403930
push 1
push 0
mov ecx, esi
call fcn.004036c0
mov al, byte [esi + 0x23]
test al, al
je 0x408450
mov ecx, esi
call fcn.00403950
test al, al
jne 0x40845d
push 1
push edi
mov ecx, esi
call fcn.004036c0
test al, al
je 0x40839f
mov al, byte [esi + 0x25]
test al, al
je 0x4083dc
mov eax, dword [esi + 0x1c4]
test eax, eax
jne 0x4082f9
cmp byte [edi], 0x80
jne 0x4082f9
inc ebx
cmp ebx, 5
jl 0x408378
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x18], 0
sub eax, ebx
sub esp, 8
mov dword [esp + 0x1c], eax
mov ecx, esi
fild qword [esp + 0x1c]
fmul dword [0x42a8a0]
fstp qword [esp]
push 0x5219
call fcn.00402e90
push eax
push esi
call fcn.00402ed0
mov eax, dword [esi + 0xe8]
add esp, 0x10
mov ecx, esi
push eax
push 0x521a
call fcn.00402e90
push eax
push esi
call fcn.00402ed0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
add esp, 0x5c
ret
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
add esp, 0x5c
ret