Function at 0x5a8bd0
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x11
push 0
push 0
dec ecx
jne 0x5a8bd8
push ebx
push esi
mov dword [ebp - 4], edx
mov esi, eax
mov eax, dword [ebp - 4]
call fcn.004048c4
xor eax, eax
push ebp
push 0x5a9a1a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [esi + 0x81c]
mov edx, dword [ebp - 4]
call fcn.00404468
mov byte [esi + 0x895], 0
mov byte [esi + 0x86e], 0
xor eax, eax
mov dword [esi + 0x874], eax
mov edx, dword [esi + 0x81c]
mov eax, 0x5a9a30
call fcn.00404a18
test eax, eax
jg 0x5a8c48
mov edx, dword [esi + 0x81c]
mov eax, 0x5a9a3c
call fcn.00404a18
test eax, eax
jle 0x5a8c66
lea ecx, [ebp - 0x1c]
mov edx, dword [esi + 0x81c]
mov eax, esi
call fcn.005a80c8
mov edx, dword [ebp - 0x1c]
lea eax, [esi + 0x81c]
call fcn.00404468
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x81c]
call fcn.00408a54
mov edx, dword [ebp - 0x20]
lea eax, [esi + 0x81c]
call fcn.00404468
cmp dword [esi + 0x81c], 0
jne 0x5a8c97
mov byte [esi + 0x895], 1
jmp 0x5a99e2
push 0xb
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 0x30], 0x3c
mov byte [ebp - 0x2f], 0x5b
mov byte [ebp - 0x2e], 0x30
mov byte [ebp - 0x2d], 0x31
mov byte [ebp - 0x2c], 0x32
mov byte [ebp - 0x2b], 0x33
mov byte [ebp - 0x2a], 0x34
mov byte [ebp - 0x29], 0x35
mov byte [ebp - 0x28], 0x36
mov byte [ebp - 0x27], 0x37
mov byte [ebp - 0x26], 0x38
mov byte [ebp - 0x25], 0x39
lea ecx, [ebp - 0x30]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00492f78
mov edx, dword [ebp - 4]
mov eax, 0x5a9a48
call fcn.00404a18
test eax, eax
jle 0x5a8d4a
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 8]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [ebp - 4]
call fcn.004932b4
push 0xb
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 0x30], 0x3c
mov byte [ebp - 0x2f], 0x5b
mov byte [ebp - 0x2e], 0x30
mov byte [ebp - 0x2d], 0x31
mov byte [ebp - 0x2c], 0x32
mov byte [ebp - 0x2b], 0x33
mov byte [ebp - 0x2a], 0x34
mov byte [ebp - 0x29], 0x35
mov byte [ebp - 0x28], 0x36
mov byte [ebp - 0x27], 0x37
mov byte [ebp - 0x26], 0x38
mov byte [ebp - 0x25], 0x39
lea ecx, [ebp - 0x30]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 8]
call fcn.00492f78
lea eax, [esi + 0x888]
mov edx, dword [ebp - 0x14]
call fcn.00404468
lea eax, [esi + 0x88c]
call fcn.00404414
mov bl, 1
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9a60
call fcn.00404820
jne 0x5a8dce
mov eax, dword [ebp - 0x18]
mov edx, 0x5a9a70
call fcn.00404820
jne 0x5a8dce
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [esi + 0x81c]
call fcn.004932b4
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [ebp - 0xc]
call fcn.004932b4
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.005a5eb4
mov ebx, eax
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9a7c
call fcn.00404820
jne 0x5a8e0b
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [esi + 0x81c]
call fcn.004932b4
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.005a5e50
mov ebx, eax
jmp 0x5a99d7
mov edx, dword [ebp - 0x14]
mov eax, 0x5a9a8c
call fcn.00404a18
dec eax
jne 0x5a8e68
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esi + 0x81c]
call fcn.004046d4
mov ecx, eax
sub ecx, 4
mov edx, 5
mov eax, dword [esi + 0x81c]
call fcn.00404934
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 0xc]
call fcn.004044ac
xor ecx, ecx
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a65f4
mov ebx, eax
jmp 0x5a99d7
mov edx, dword [ebp - 0x14]
mov eax, 0x5a9a9c
call fcn.00404a18
dec eax
jne 0x5a8ec5
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esi + 0x81c]
call fcn.004046d4
mov ecx, eax
sub ecx, 2
mov edx, 3
mov eax, dword [esi + 0x81c]
call fcn.00404934
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x44]
lea eax, [ebp - 0xc]
call fcn.004044ac
xor ecx, ecx
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a66d4
mov ebx, eax
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9aa8
call fcn.00404820
jne 0x5a8ee4
xor ebx, ebx
xor edx, edx
mov eax, esi
call fcn.005a6a08
jmp 0x5a99d7
mov edx, dword [ebp - 0x14]
mov eax, 0x5a9ab8
call fcn.00404a18
dec eax
jne 0x5a8f38
lea eax, [ebp - 8]
push eax
mov eax, dword [esi + 0x81c]
call fcn.004046d4
mov ecx, eax
sub ecx, 4
mov edx, 5
mov eax, dword [esi + 0x81c]
call fcn.00404934
cmp byte [esi + 0x822], 0
je 0x5a8f31
mov ecx, dword [ebp - 8]
xor edx, edx
mov eax, dword [esi + 0x868]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
jmp 0x5a99d7
mov edx, dword [ebp - 0x14]
mov eax, 0x5a9ac8
call fcn.00404a18
dec eax
jne 0x5a8f8c
lea eax, [ebp - 8]
push eax
mov eax, dword [esi + 0x81c]
call fcn.004046d4
mov ecx, eax
sub ecx, 4
mov edx, 5
mov eax, dword [esi + 0x81c]
call fcn.00404934
cmp byte [esi + 0x822], 0
jne 0x5a8f85
mov ecx, dword [ebp - 8]
xor edx, edx
mov eax, dword [esi + 0x868]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9ad8
call fcn.00404820
jne 0x5a8ff2
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [esi + 0x81c]
call fcn.004932b4
xor ebx, ebx
push 0xff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xffffff
mov edx, dword [ebp - 8]
call fcn.005b2b94
mov eax, dword [0x5d3b60]
mov edx, dword [ebp - 8]
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9aec
call fcn.00404820
jne 0x5a90dd
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [esi + 0x81c]
call fcn.004932b4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [ebp - 0xc]
call fcn.004932b4
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 8]
call fcn.00408a54
mov edx, dword [ebp - 0x50]
lea eax, [ebp - 8]
call fcn.004044ac
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0xc]
call fcn.00408a54
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 0xc]
call fcn.004044ac
cmp dword [ebp - 8], 0
je 0x5a90d6
cmp dword [ebp - 0xc], 0
je 0x5a90d6
mov eax, dword [0x5d3838]
cmp byte [eax], 0
je 0x5a90b8
push 0x5a9a30
push dword [esi + 0x818]
push 0x5a9b00
lea eax, [ebp - 0x58]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0x58]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x5cc]
mov eax, dword [eax + 0x90]
call fcn.00497644
jmp 0x5a90d6
mov eax, dword [0x5d33c8]
cmp byte [eax], 0
je 0x5a90d6
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
xor ecx, ecx
mov edx, dword [esi + 0x818]
call fcn.005589d8
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9b0c
call fcn.00404820
jne 0x5a9111
mov eax, dword [0x5d3e24]
cmp dword [eax], 0
je 0x5a910a
mov eax, dword [0x5d3e24]
mov eax, dword [eax]
mov byte [eax + 0x59], 1
mov eax, dword [0x5d3e24]
xor edx, edx
mov dword [eax], edx
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9b24
call fcn.00404820
jne 0x5a9191
mov eax, dword [0x5d3b30]
cmp byte [eax], 0
je 0x5a918a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d39e8]
sub eax, dword [edx]
cmp eax, 0x3e8
jbe 0x5a918a
mov eax, dword [0x5d3a24]
cmp byte [eax], 0
jne 0x5a918a
mov eax, dword [0x5d3db0]
mov byte [eax], 1
mov eax, dword [0x5d3b08]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d39e8]
mov dword [edx], eax
mov eax, dword [0x5d3690]
mov dword [eax], 1
mov eax, dword [0x5d34cc]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov edx, 0x5a9b38
call fcn.00533810
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9b48
call fcn.00404820
jne 0x5a920f
mov eax, dword [0x5d3b30]
cmp byte [eax], 0
je 0x5a9208
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d39e8]
sub eax, dword [edx]
cmp eax, 0x3e8
jbe 0x5a9208
mov eax, dword [0x5d3b08]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d39e8]
mov dword [edx], eax
mov eax, dword [0x5d3690]
mov dword [eax], 2
mov eax, dword [0x5d3db0]
mov byte [eax], 1
mov eax, dword [0x5d3a24]
mov byte [eax], 0
mov eax, dword [0x5d34cc]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov edx, 0x5a9b38
call fcn.00533810
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9b5c
call fcn.00404820
jne 0x5a938a
xor ebx, ebx
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [esi + 0x81c]
call fcn.004932b4
mov eax, dword [ebp - 8]
mov edx, 0x5a9b70
call fcn.00404820
jne 0x5a9282
mov eax, dword [0x5d31e0]
mov byte [eax + 0x13], 1
mov eax, dword [0x5d31e0]
mov byte [eax + 0x14], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x15], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x16], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x1b], 0
jmp 0x5a99d7
mov eax, dword [ebp - 8]
mov edx, 0x5a9b80
call fcn.00404820
jne 0x5a92c3
mov eax, dword [0x5d31e0]
mov byte [eax + 0x13], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x14], 1
mov eax, dword [0x5d31e0]
mov byte [eax + 0x15], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x16], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x1b], 0
jmp 0x5a99d7
mov eax, dword [ebp - 8]
mov edx, 0x5a9b94
call fcn.00404820
jne 0x5a9304
mov eax, dword [0x5d31e0]
mov byte [eax + 0x13], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x14], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x15], 1
mov eax, dword [0x5d31e0]
mov byte [eax + 0x16], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x1b], 0
jmp 0x5a99d7
mov eax, dword [ebp - 8]
mov edx, 0x5a9ba8
call fcn.00404820
jne 0x5a9345
mov eax, dword [0x5d31e0]
mov byte [eax + 0x13], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x14], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x15], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x16], 1
mov eax, dword [0x5d31e0]
mov byte [eax + 0x1b], 0
jmp 0x5a99d7
mov eax, dword [ebp - 8]
mov edx, 0x5a9bb8
call fcn.00404820
jne 0x5a99d7
mov eax, dword [0x5d31e0]
mov byte [eax + 0x13], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x14], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x15], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x16], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x1b], 1
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9bcc
call fcn.00404820
jne 0x5a93ae
xor ebx, ebx
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov dl, 1
call fcn.00534df0
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9be0
call fcn.00404820
jne 0x5a93d2
xor ebx, ebx
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
xor edx, edx
call fcn.00534df0
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9bf4
call fcn.00404820
jne 0x5a93f8
mov eax, dword [0x5d333c]
mov byte [eax], 0
mov eax, dword [0x5d3658]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9c08
call fcn.00404820
jne 0x5a9437
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x60]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [esi + 0x81c]
call fcn.004932b4
xor ecx, ecx
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.005a77dc
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9c18
call fcn.00404820
jne 0x5a94d2
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [esi + 0x81c]
call fcn.004932b4
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x64]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [ebp - 0xc]
call fcn.004932b4
push 0
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 0x6c], 0x2c
lea ecx, [ebp - 0x6c]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.00492f78
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 0x10]
call fcn.004044ac
or edx, 0xffffffff
mov eax, dword [ebp - 0xc]
call fcn.00408e98
mov ebx, eax
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.00408e98
push eax
push 0
mov ecx, ebx
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.005a7ab0
mov ebx, eax
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9c2c
call fcn.00404820
jne 0x5a9514
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x70]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [esi + 0x81c]
call fcn.004932b4
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.00533810
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9c3c
call fcn.00404820
jne 0x5a9551
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x74]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [esi + 0x81c]
call fcn.004932b4
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.005a86a4
mov ebx, eax
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9c4c
call fcn.00404820
jne 0x5a95b5
inc dword [esi + 0x814]
mov eax, dword [esi + 0x814]
mov edx, dword [esi + 0x82c]
mov dword [esi + eax*4 + 0x410], edx
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x78]
push eax
mov ecx, 0x5a9c5c
mov edx, 0x5a9c68
mov eax, dword [esi + 0x81c]
call fcn.004932b4
mov al, byte [esi + 0x822]
mov byte [esi + 0x823], al
xor ecx, ecx
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.005a7498
mov ebx, eax
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9c74
call fcn.00404820
jne 0x5a95f0
mov eax, dword [esi + 0x814]
mov eax, dword [esi + eax*4 + 0x410]
mov dword [esi + 0x82c], eax
dec dword [esi + 0x814]
mov al, byte [esi + 0x823]
mov byte [esi + 0x822], al
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9c84
call fcn.00404820
jne 0x5a962a
mov eax, dword [0x5d3658]
mov byte [eax], 1
mov eax, dword [0x5d3b60]
mov edx, 0x5a9c84
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9c98
call fcn.00404820
jne 0x5a9664
mov eax, dword [0x5d3658]
mov byte [eax], 0
mov eax, dword [0x5d3b60]
mov edx, 0x5a9c98
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9cac
call fcn.00404820
jne 0x5a969e
mov eax, dword [0x5d328c]
mov byte [eax], 1
mov eax, dword [0x5d3b60]
mov edx, 0x5a9cac
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9cc0
call fcn.00404820
jne 0x5a96d8
mov eax, dword [0x5d328c]
mov byte [eax], 0
mov eax, dword [0x5d3b60]
mov edx, 0x5a9cc0
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9cd4
call fcn.00404820
jne 0x5a9712
mov eax, dword [0x5d391c]
mov byte [eax], 1
mov eax, dword [0x5d3b60]
mov edx, 0x5a9cd4
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9cec
call fcn.00404820
jne 0x5a974c
mov eax, dword [0x5d391c]
mov byte [eax], 0
mov eax, dword [0x5d3b60]
mov edx, 0x5a9cec
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9d04
call fcn.00404820
jne 0x5a97f0
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x7c]
push eax
mov ecx, 0x5a9a54
mov edx, 0x5a9a48
mov eax, dword [esi + 0x81c]
call fcn.004932b4
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 8]
call fcn.00409584
mov ecx, dword [ebp - 0x80]
mov edx, dword [0x5d32cc]
mov edx, dword [edx]
lea eax, [ebp - 8]
call fcn.00404720
mov eax, dword [ebp - 8]
call fcn.004092c0
test al, al
je 0x5a97b0
mov eax, dword [ebp - 8]
call fcn.005aab94
jmp 0x5a97e9
push 0xffffff
push 0x5a9d18
push dword [ebp - 8]
push 0x5a9d30
lea eax, [ebp - 0x84]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0x84]
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
call fcn.005b2b94
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9d48
call fcn.00404820
jne 0x5a9853
mov eax, dword [0x5d37fc]
mov byte [eax], 1
mov eax, dword [0x5d3434]
cmp byte [eax], 0
je 0x5a9830
mov eax, dword [0x5d3434]
mov al, byte [eax]
mov edx, dword [0x5d3a10]
mov byte [edx], al
mov eax, dword [0x5d3eb4]
mov byte [eax], 1
mov eax, dword [0x5d3434]
mov byte [eax], 0
mov eax, dword [0x5d3b60]
mov edx, 0x5a9d48
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9d5c
call fcn.00404820
jne 0x5a98ae
mov eax, dword [0x5d37fc]
mov byte [eax], 0
mov eax, dword [0x5d3eb4]
cmp byte [eax], 0
je 0x5a9883
mov eax, dword [0x5d3a10]
mov al, byte [eax]
mov edx, dword [0x5d3434]
mov byte [edx], al
mov eax, dword [0x5d3eb4]
mov byte [eax], 0
mov eax, dword [0x5d3b60]
mov edx, 0x5a9d5c
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9d70
call fcn.00404820
jne 0x5a990a
mov eax, dword [0x5d3434]
mov byte [eax], 1
mov eax, dword [0x5d37fc]
cmp byte [eax], 0
je 0x5a98e7
mov eax, dword [0x5d37fc]
mov byte [eax], 0
mov eax, dword [0x5d3dfc]
mov byte [eax], 1
mov eax, dword [0x5d36e4]
mov byte [eax], 1
mov eax, dword [0x5d3b60]
mov edx, 0x5a9d70
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9d84
call fcn.00404820
jne 0x5a9962
mov eax, dword [0x5d3434]
mov byte [eax], 0
mov eax, dword [0x5d36e4]
cmp byte [eax], 0
je 0x5a993a
mov eax, dword [0x5d3dfc]
mov al, byte [eax]
mov edx, dword [0x5d37fc]
mov byte [edx], al
mov eax, dword [0x5d36e4]
mov byte [eax], 0
mov eax, dword [0x5d3b60]
mov edx, 0x5a9d84
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9d98
call fcn.00404820
jne 0x5a99a1
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x5a9c5c
mov edx, 0x5a9c68
mov eax, dword [esi + 0x81c]
call fcn.004932b4
xor ecx, ecx
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.005a7498
mov ebx, eax
jmp 0x5a99d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5a9da8
call fcn.00404820
jne 0x5a99d5
mov eax, dword [0x5d35ec]
mov byte [eax], 0
mov eax, dword [0x5d3658]
mov byte [eax], 0
mov eax, dword [0x5d328c]
mov byte [eax], 0
mov eax, dword [esi + 0x860]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp 0x5a99d7
xor ebx, ebx
test bl, bl
jne 0x5a99e2
mov byte [esi + 0x895], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a9a21
lea eax, [ebp - 0x88]
mov edx, 7
call fcn.00404438
lea eax, [ebp - 0x68]
mov edx, 0xe
call fcn.00404438
lea eax, [ebp - 0x24]
mov edx, 9
call fcn.00404438
ret