Function at 0x405c80
Capabilities:
Check for time delay via gettickcount

Disassembly:
sub esp, 0x40
push ebx
push ebp
push esi
push edi
mov ebx, 0xe100
mov edi, 0x7080
mov esi, ecx
push 0xa
mov dword [esp + 0x20], 0xe1000
mov dword [esp + 0x24], 0x70800
mov dword [esp + 0x28], 0x38400
mov dword [esp + 0x2c], 0x1c200
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], 0x9600
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], 0x4b00
mov dword [esp + 0x40], 0x3840
mov dword [esp + 0x44], 0x2580
mov dword [esp + 0x48], 0x12c0
mov dword [esp + 0x4c], 0x960
mov dword [esp + 0x50], 0x4b0
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x1f50
mov ecx, esi
mov dword [esp + 0x18], eax
call fcn.00401690
push eax
push esi
call fcn.004016d0
mov eax, dword [esi + 0x100]
add esp, 8
shl eax, 5
mov ecx, dword [eax + 0x41b410]
shr ecx, 0xe
and ecx, 0xff
lea eax, [ecx - 1]
cmp eax, 0x1b
ja case.0x405d47.3
xor edx, edx
mov dl, byte [eax + 0x406968]
jmp dword [edx*4 + 0x40695c]
mov eax, dword [esi + 0x17c]
mov byte [esi + 0x650], 0x8f
cmp eax, 2
jne 0x4060ff
mov ebp, dword [esi + 0xcc]
fild dword [esi + 0xf8]
mov dword [esp + 0x10], ebp
fild dword [esp + 0x10]
fdivr st(1)
fst dword [esp + 0x10]
fmul dword [0x424090]
fcomp dword [0x42408c]
fnstsw ax
test ah, 0x41
jne 0x406032
fld dword [esp + 0x10]
fmul dword [0x424088]
fcomp dword [0x42408c]
fnstsw ax
test ah, 0x41
jne 0x405f65
fld dword [esp + 0x10]
fmul dword [0x424084]
fcomp dword [0x42408c]
fnstsw ax
test ah, 0x41
jne 0x405e98
mov byte [esi + 0x651], 0
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x424080]
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x424080]
fsub st(1)
fdivrp st(1)
fcom dword [0x424074]
fnstsw ax
test ah, 0x41
jne 0x405e1f
fcomp dword [0x424070]
fnstsw ax
test ah, 1
jne 0x405e2a
jmp 0x405e21
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x405dd8
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x424080]
fcomp dword [0x42408c]
fnstsw ax
test ah, 1
jne 0x405e52
dec ecx
sub edx, 4
test ecx, ecx
jge 0x405e33
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x405e5e
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x405e6e
cmp ebp, edi
jge 0x405e70
mov edi, ebp
jmp 0x405e70
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xcc], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x424080]
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x4061f3
mov byte [esi + 0x651], 0x80
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x424084]
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x424084]
fsub st(1)
fdivrp st(1)
fcom dword [0x424074]
fnstsw ax
test ah, 0x41
jne 0x405eec
fcomp dword [0x424070]
fnstsw ax
test ah, 1
jne 0x405ef7
jmp 0x405eee
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x405ea5
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x424084]
fcomp dword [0x42408c]
fnstsw ax
test ah, 1
jne 0x405f1f
dec ecx
sub edx, 4
test ecx, ecx
jge 0x405f00
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x405f2b
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x405f3b
cmp ebp, edi
jge 0x405f3d
mov edi, ebp
jmp 0x405f3d
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xcc], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x424084]
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x4061f3
mov byte [esi + 0x651], 0x40
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x424088]
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x424088]
fsub st(1)
fdivrp st(1)
fcom dword [0x424074]
fnstsw ax
test ah, 0x41
jne 0x405fb9
fcomp dword [0x424070]
fnstsw ax
test ah, 1
jne 0x405fc4
jmp 0x405fbb
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x405f72
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x424088]
fcomp dword [0x42408c]
fnstsw ax
test ah, 1
jne 0x405fec
dec ecx
sub edx, 4
test ecx, ecx
jge 0x405fcd
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x405ff8
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x406008
cmp ebp, edi
jge 0x40600a
mov edi, ebp
jmp 0x40600a
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xcc], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x424088]
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x4061f3
mov byte [esi + 0x651], 0xc0
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x424090]
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x424090]
fsub st(1)
fdivrp st(1)
fcom dword [0x424074]
fnstsw ax
test ah, 0x41
jne 0x406086
fcomp dword [0x424070]
fnstsw ax
test ah, 1
jne 0x406091
jmp 0x406088
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x40603f
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x424090]
fcomp dword [0x42408c]
fnstsw ax
test ah, 1
jne 0x4060b9
dec ecx
sub edx, 4
test ecx, ecx
jge 0x40609a
mov edi, dword [esp + edi*4 + 0x1c]
mov eax, ebp
cmp ebp, edi
jl 0x4060c5
mov eax, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp eax, ecx
jle 0x4060d5
cmp ebp, edi
jge 0x4060d7
mov edi, ebp
jmp 0x4060d7
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [esi + 0xcc], edi
fild dword [esp + 0x10]
fdivr st(1)
fmul dword [0x424090]
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
fstp st(0)
jmp 0x4061f3
cmp eax, 3
jne 0x4061fb
fild dword [esi + 0xf8]
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x424088]
fcom dword [0x42406c]
fnstsw ax
test ah, 1
jne 0x406168
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x424088]
fsub st(1)
fdivrp st(1)
fcom dword [0x424074]
fnstsw ax
test ah, 0x41
jne 0x40616a
fcomp dword [0x424070]
fnstsw ax
test ah, 1
jne 0x406175
jmp 0x40616c
fstp st(0)
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x406114
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x424088]
fcomp dword [0x424068]
fnstsw ax
test ah, 1
jne 0x40619d
dec ecx
sub edx, 4
test ecx, ecx
jge 0x40617e
mov eax, dword [esi + 0xcc]
mov edi, dword [esp + edi*4 + 0x1c]
cmp eax, edi
mov edx, eax
jl 0x4061af
mov edx, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp edx, ecx
jle 0x4061bf
cmp eax, edi
jl 0x4061c1
mov eax, edi
jmp 0x4061c1
mov eax, ecx
mov dword [esp + 0x10], eax
mov dword [esi + 0xcc], eax
fidiv dword [esp + 0x10]
fmul dword [0x424088]
fadd qword [0x424078]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor ecx, ecx
mov cl, ah
mov byte [esi + 0x651], cl
call sub.MSVCRT.dll__ftol
neg al
mov byte [esi + 0x652], al
mov bl, byte [esi + 0x651]
xor eax, eax
mov al, byte [esi + 0x652]
or dl, 0xff
mov ecx, eax
mov eax, pe_nt_image_headers32
sub eax, ecx
sub dl, bl
shl eax, 1
cmp eax, 0xfe
mov byte [esi + 0x653], dl
jle 0x40622b
mov eax, 0xfe
mov ecx, dword [esi + 0xc8]
mov byte [esi + 0x654], al
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [edx + edx*4]
shl eax, 2
cmp eax, 0xfa
jg 0x406268
cmp eax, 0x28
jge 0x406261
mov eax, 0x28
jmp 0x40626d
cmp eax, 0xfa
jle 0x40626d
mov eax, 0xfa
mov ecx, esi
mov byte [esi + 0x655], al
call fcn.004022f0
mov ecx, dword [esi + 0x154]
mov byte [esi + 0x656], al
cmp ecx, 0x72
jl 0x4062a2
lea ecx, [esi + 0x650]
push 4
mov byte [esi + 0x653], al
push ecx
mov byte [ecx], 1
jmp 0x406710
lea eax, [esi + 0x650]
push 7
push eax
mov ecx, esi
call fcn.00401ca0
mov ecx, dword [esi + 0xcc]
push 0x8f
push ecx
mov ecx, esi
call fcn.00402120
push 0x1388
mov ecx, esi
call fcn.004020d0
push 1
push 0
mov ecx, esi
call fcn.00401e40
mov al, byte [esi + 0x1b]
test al, al
je 0x406941
mov ecx, esi
call fcn.004020f0
test al, al
jne 0x40694e
lea edx, [esi + 0x250]
push 1
push edx
mov ecx, esi
call fcn.00401e40
test al, al
je 0x4062dc
mov al, byte [esi + 0x1d]
test al, al
je 0x406328
mov eax, dword [esi + 0x1a0]
test eax, eax
je 0x406328
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x40
ret
cmp byte [esi + 0x250], 0x8f
je 0x40633e
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x40
ret
mov eax, dword [esi + 0xc8]
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.00402120
lea eax, [esi + 0x650]
push 6
mov byte [eax], 0x8e
jmp 0x40670f
cmp dword [esi + 0x154], 0x71
jge case.0x405d47.3
mov eax, dword [esi + 0xf8]
lea ebp, [esi + 0x650]
cmp eax, 0x1312d00
mov dword [esp + 0x10], eax
mov byte [ebp], 0x8e
jge 0x4063b2
mov ecx, dword [esi + 0xcc]
mov byte [esi + 0x651], 0x58
test ecx, ecx
mov byte [esi + 0x658], 0x83
jne 0x4063a4
mov dword [esi + 0xcc], edi
mov ecx, dword [esi + 0xcc]
cmp ecx, edi
jl 0x4063dc
mov ecx, edi
jmp 0x4063dc
mov ecx, dword [esi + 0xcc]
mov byte [esi + 0x651], 0x98
test ecx, ecx
mov byte [esi + 0x658], 0x81
jne 0x4063d0
mov dword [esi + 0xcc], ebx
mov ecx, dword [esi + 0xcc]
cmp ecx, ebx
jl 0x4063dc
mov ecx, ebx
mov dword [esi + 0xcc], ecx
mov cl, byte [esi + 0x24c]
mov byte [esi + 0x652], cl
mov ecx, dword [esi + 0xcc]
test ecx, ecx
jne 0x406411
xor edx, edx
cmp eax, 0x1312d00
setge dl
dec edx
and edx, 0xffff8f80
add edx, ebx
mov dword [esi + 0xcc], edx
cdq
idiv dword [esi + 0xcc]
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
jne 0x40643e
neg bl
mov byte [esi + 0x653], 0
mov byte [esi + 0x654], bl
jmp 0x40645b
mov cl, dl
mov eax, ebx
inc cl
mov byte [esi + 0x653], cl
and ecx, 0xff
cdq
idiv ecx
neg al
mov byte [esi + 0x654], al
fild dword [esp + 0x10]
mov byte [esi + 0x655], 0x64
fmul dword [0x424064]
fsubr dword [0x424060]
call sub.MSVCRT.dll__ftol
and eax, 0xffff
xor ecx, ecx
mov cl, ah
push 0xc
mov byte [esi + 0x656], cl
mov byte [esi + 0x657], al
mov byte [esi + 0x659], 0x20
mov byte [esi + 0x65a], 0xff
mov byte [esi + 0x65b], 0
push ebp
jmp 0x406710
mov al, byte [esi + 0x24d]
mov dl, byte [esi + 0x24c]
mov byte [esi + 0x652], al
mov eax, dword [esi + 0x17c]
test eax, eax
mov byte [esi + 0x650], 1
mov byte [esi + 0x651], dl
jne 0x40660d
fild dword [esi + 0xf8]
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fcom dword [0x42405c]
fnstsw ax
test ah, 1
jne 0x40652a
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fsub st(1)
fdivrp st(1)
fcom dword [0x424074]
fnstsw ax
test ah, 0x41
jne 0x40652c
fcomp dword [0x424070]
fnstsw ax
test ah, 1
jne 0x406537
jmp 0x40652e
fstp st(0)
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x4064e2
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fcomp dword [0x424058]
fnstsw ax
test ah, 1
jne 0x406559
dec ecx
sub edx, 4
test ecx, ecx
jge 0x406540
mov eax, dword [esi + 0xcc]
mov edi, dword [esp + edi*4 + 0x1c]
cmp eax, edi
mov edx, eax
jl 0x40656b
mov edx, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp edx, ecx
jle 0x40657f
cmp eax, edi
jge 0x40657b
mov edx, eax
jmp 0x406581
mov edx, edi
jmp 0x406581
mov edx, ecx
cmp edx, 0x9600
jle 0x406590
mov eax, 0x9600
jmp 0x4065a6
cmp eax, edi
mov edx, eax
jl 0x406598
mov edx, edi
cmp edx, ecx
jle 0x4065a4
cmp eax, edi
jl 0x4065a6
mov eax, edi
jmp 0x4065a6
mov eax, ecx
mov dword [esp + 0x10], eax
mov dword [esi + 0xcc], eax
fidiv dword [esp + 0x10]
fld st(0)
fadd qword [0x424078]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor ecx, ecx
mov cl, ah
mov byte [esi + 0x653], cl
call sub.MSVCRT.dll__ftol
fmul qword [0x424050]
neg al
mov byte [esi + 0x654], al
fadd qword [0x424078]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor edx, edx
mov dl, ah
mov byte [esi + 0x655], dl
call sub.MSVCRT.dll__ftol
neg al
mov byte [esi + 0x656], al
jmp 0x4066fa
cmp eax, 1
jne 0x4066fa
fild dword [esi + 0xf8]
xor edi, edi
lea ebx, [esp + 0x1c]
fild dword [ebx]
fld st(1)
fdiv st(1)
fmul dword [0x424048]
fadd qword [0x424078]
call sub.MSVCRT.dll__ftol
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fdivr st(2)
fmul dword [0x424048]
fsub st(1)
fdivrp st(1)
fcom dword [0x424074]
fnstsw ax
test ah, 0x41
jne 0x406669
fcomp dword [0x424070]
fnstsw ax
test ah, 1
jne 0x406674
jmp 0x40666b
fstp st(0)
inc edi
add ebx, 4
cmp edi, 0xd
jb 0x406622
mov ecx, 0xc
lea edx, [esp + 0x4c]
fild dword [edx]
fdivr st(1)
fmul dword [0x424048]
fcomp dword [0x424068]
fnstsw ax
test ah, 1
jne 0x40669c
dec ecx
sub edx, 4
test ecx, ecx
jge 0x40667d
mov eax, dword [esi + 0xcc]
mov edi, dword [esp + edi*4 + 0x1c]
cmp eax, edi
mov edx, eax
jl 0x4066ae
mov edx, edi
mov ecx, dword [esp + ecx*4 + 0x1c]
cmp edx, ecx
jle 0x4066be
cmp eax, edi
jl 0x4066c0
mov eax, edi
jmp 0x4066c0
mov eax, ecx
mov dword [esp + 0x10], eax
mov dword [esi + 0xcc], eax
fidiv dword [esp + 0x10]
fmul dword [0x424048]
fadd qword [0x424078]
fld st(0)
call sub.MSVCRT.dll__ftol
neg eax
xor ecx, ecx
mov cl, ah
mov byte [esi + 0x653], cl
call sub.MSVCRT.dll__ftol
neg al
mov byte [esi + 0x654], al
mov ecx, esi
call fcn.004022f0
mov byte [esi + 0x657], al
push 8
lea eax, [esi + 0x650]
push eax
mov ecx, esi
call fcn.00401ca0
cmp dword [esi + 0x178], 3
jge 0x406733
mov edx, dword [esi + 0xcc]
push 0x8e
push edx
mov ecx, esi
call fcn.00402120
push 0x1388
mov ecx, esi
call fcn.004020d0
push 1
push 0
mov ecx, esi
call fcn.00401e40
mov al, byte [esi + 0x1b]
test al, al
je 0x406941
mov ecx, esi
call fcn.004020f0
test al, al
jne 0x40694e
lea eax, [esi + 0x250]
push 1
push eax
mov ecx, esi
call fcn.00401e40
test al, al
je 0x40674a
mov al, byte [esi + 0x1d]
test al, al
je 0x406796
mov eax, dword [esi + 0x1a0]
test eax, eax
je 0x406796
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x40
ret
mov eax, dword [esi + 0x178]
test eax, eax
jne 0x4067be
mov cl, byte [esi + 0x250]
lea edi, [esi + 0x250]
cmp cl, 0x8e
je 0x4067f7
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x40
ret
cmp eax, 3
lea edi, [esi + 0x250]
jl 0x4067e5
mov cl, byte [esi + 0x650]
mov dl, byte [edi]
and cl, 0xf
cmp dl, cl
je 0x4067f7
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x40
ret
cmp byte [edi], 0x84
je 0x4067f7
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x40
ret
cmp eax, 3
jl 0x40680c
mov edx, dword [esi + 0xcc]
push 0xffffffffffffffff
push edx
mov ecx, esi
call fcn.00402120
mov eax, dword [esi + 0x178]
test eax, eax
jne 0x4068dc
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x100]
xor ecx, ecx
shl eax, 5
mov byte [esi + 0x650], 0x80
mov byte [esi + 0x651], 0
lea eax, [eax + 0x41b418]
mov byte [esi + 0x652], 0
mov byte [esi + 0x653], 0x36
mov byte [esi + 0x654], 1
mov cl, byte [eax + 1]
xor ebx, ebx
mov byte [esi + 0x655], cl
mov dl, byte [eax]
mov byte [esi + 0x656], dl
lea eax, [esi + 0x650]
push 7
push eax
mov ecx, esi
call fcn.00401ca0
push 0x1388
mov ecx, esi
call fcn.004020d0
push 1
push 0
mov ecx, esi
call fcn.00401e40
mov al, byte [esi + 0x1b]
test al, al
je 0x406941
mov ecx, esi
call fcn.004020f0
test al, al
jne 0x40694e
push 1
push edi
mov ecx, esi
call fcn.00401e40
test al, al
je 0x406890
mov al, byte [esi + 0x1d]
test al, al
je 0x4068cd
mov eax, dword [esi + 0x1a0]
test eax, eax
jne 0x4067ea
cmp byte [edi], 0x80
jne 0x4067ea
inc ebx
cmp ebx, 5
jl 0x406869
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x18], 0
sub eax, ebx
sub esp, 8
mov dword [esp + 0x1c], eax
mov ecx, esi
fild qword [esp + 0x1c]
fmul dword [0x424044]
fstp qword [esp]
push 0x1f51
call fcn.00401690
push eax
push esi
call fcn.004016d0
mov eax, dword [esi + 0xcc]
add esp, 0x10
mov ecx, esi
push eax
push 0x1f52
call fcn.00401690
push eax
push esi
call fcn.004016d0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x40
ret
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
add esp, 0x40
ret
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
add esp, 0x40
ret