Function at 0xb41684
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 4
push 0
push 0
dec ecx
jne 0xb4168c
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x10], edx
mov ebx, eax
xor eax, eax
push ebp
push 0xb418cf
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x11], 0
mov eax, dword [ebx + 0xc]
test eax, eax
je 0xb416ba
sub eax, 4
mov eax, dword [eax]
test eax, eax
jle 0xb4189f
lea eax, [ebp - 0x1c]
mov edx, dword [ebx + 0xc]
call fcn.00a15d8c
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 4]
mov dl, 1
call fcn.00af2fb0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 8]
lea edx, [ebp - 0x12]
mov eax, dword [ebp - 4]
call fcn.00b405b4
xor eax, eax
push ebp
push 0xb41895
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00b3e5a8
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
call fcn.00b3d6c0
movzx edx, byte [ebp - 0x12]
mov eax, dword [ebp - 0x10]
call fcn.00b3d718
lea edx, [ebp - 0x20]
movzx eax, word [ebp - 0x14]
call fcn.00a1a790
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00b3d6ec
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.00b3d758
mov dl, 1
mov eax, dword [0xa2ac9c]
call fcn.00a14440
mov dword [ebp - 0x18], eax
xor eax, eax
push ebp
push 0xb41884
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.00b3d7e8
mov eax, dword [ebp - 0x10]
call fcn.00b3e8fc
call sub.kernel32.dll_GetTickCount_1
mov esi, eax
push 1
call sub.kernel32.dll_Sleep_2
call sub.kernel32.dll_GetTickCount_1
sub eax, esi
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xc]
cdq
cmp edx, dword [esp + 4]
jne 0xb417a0
cmp eax, dword [esp]
pop edx
pop eax
ja 0xb417b5
jmp 0xb417a4
pop edx
pop eax
jg 0xb417b5
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0xb417b5
cmp eax, 0
je 0xb417e3
cmp byte [ebx + 4], 0
je 0xb417cd
call fcn.00a14dd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xb4189f
mov eax, dword [ebp - 0x10]
call fcn.00b3d520
sub al, 2
je 0xb417e3
sub al, 2
je 0xb417e3
add al, 0xf9
sub al, 2
jae 0xb41778
cmp byte [ebx + 4], 0
je 0xb417fb
call fcn.00a14dd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xb4189f
mov eax, dword [ebp - 0x10]
call fcn.00b3d520
cmp al, 0xb
jne 0xb4184d
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 4]
call fcn.00aed6a0
mov eax, dword [ebp - 0x24]
mov edx, dword [ebx + 0x10]
call fcn.00a1a374
test al, al
je 0xb4183e
mov edx, dword [ebx + 0x14]
mov eax, dword [ebp - 0x18]
call fcn.00a30300
mov byte [ebp - 0x11], 1
jmp 0xb4185a
lea eax, [ebx + 0x18]
mov edx, 0xb418ec
call fcn.00a15444
jmp 0xb4185a
lea eax, [ebx + 0x18]
mov edx, 0xb418fc
call fcn.00a15444
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xb4188b
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00b3d7e8
mov eax, dword [ebp - 0x18]
call fcn.00a14470
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00b3e5a8
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xb418d6
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00a15414
lea eax, [ebp - 0x1c]
call fcn.00a15c08
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00a15414
ret