Function at 0x43f620
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x568e18
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x5c524c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [ebp + 8]
xor ebx, ebx
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x2c], 1
cmp ecx, 0x113
ja 0x43f91f
je 0x43f8b9
lea eax, [ecx - 1]
cmp eax, 0xa2
ja case.0x43f686.4
movzx eax, byte [eax + 0x43fcb8]
jmp dword [eax*4 + 0x43fc80]
mov eax, dword [edi]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, edi
call dword [eax + 0x78]
jmp 0x43fbb6
mov eax, dword [edi]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, edi
call dword [eax + 0x48]
jmp 0x43fbb6
mov eax, dword [edi]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, edi
call dword [eax + 0x4c]
jmp 0x43fbb6
push dword [edi + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
push eax
mov ecx, edi
call fcn.004436b0
mov dword [ebp - 0x2c], ebx
xor ebx, ebx
jmp 0x43fbb8
mov ecx, edi
call fcn.0048ada0
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
xor eax, eax
mov ecx, edi
cmp esi, 1
sete al
push eax
call fcn.004436b0
mov dword [ebp - 0x2c], ebx
xor ebx, ebx
jmp 0x43fbb8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp + 0x10]
test ebx, ebx
je 0x43f735
mov ecx, dword [edi + 0x37c]
test ecx, ecx
je 0x43f735
add ecx, 0x280
call fcn.0048ada0
and dword [ebx + 0x18], 0xfffffffb
mov dword [ebx + 4], eax
xor ebx, ebx
jmp 0x43fbb8
lea ecx, [edi + 0x30]
call fcn.0048ed40
test eax, eax
je case.0x43f686.6
push dword [edi + 4]
call dword [sym.imp.USER32.dll_IsZoomed]
lea ecx, [edi + 0x30]
test eax, eax
je 0x43f779
push str.restore
call fcn.0048e640
test eax, eax
je 0x43f772
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx + 0x10c]
push 0x57c79c
jmp 0x43f798
push 0x57c79c
call fcn.0048e640
test eax, eax
je 0x43f793
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx + 0x10c]
push str.restore
lea ecx, [edi + 0x30]
call fcn.0048e640
test eax, eax
je case.0x43f686.6
mov edx, dword [eax]
mov ecx, eax
push 0
call dword [edx + 0x10c]
mov dword [ebp - 0x2c], ebx
xor ebx, ebx
jmp 0x43fbb8
mov dword [ebp - 0x2c], ebx
cmp dword [edi + 0x38c], ebx
je 0x43f7e7
mov dword [edi + 0x38c], ebx
cmp dword [edi + 0x388], ebx
je 0x43f7e1
push 0
push 0
push 1
push 0x25
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov dword [edi + 0x388], ebx
xor ebx, ebx
jmp 0x43fbb8
mov ecx, dword [edi + 0x37c]
mov dword [ebp - 0x2c], ebx
test ecx, ecx
je 0x43f80d
add ecx, 0x280
call fcn.0048ada0
push eax
call dword [sym.imp.USER32.dll_SetFocus]
cmp dword [edi + 0x38c], ebx
jne 0x43f735
push 0
lea esi, [edi + 0x388]
mov dword [edi + 0x38c], 1
mov dword [esi], ebx
mov ebx, dword [sym.imp.USER32.dll_SystemParametersInfoW]
push esi
push 0
push 0x26
call ebx
cmp dword [esi], 0
je 0x43f735
push 0
push 0
push 0
push 0x25
call ebx
xor ebx, ebx
jmp 0x43fbb8
call fcn.00425550
mov ecx, eax
call fcn.00425640
test eax, eax
je 0x43f735
push dword [edi + 4]
call dword [sym.imp.USER32.dll_IsZoomed]
mov ecx, edi
test eax, eax
je 0x43f883
call fcn.0043ece0
xor ebx, ebx
jmp 0x43fbb8
call fcn.0043ea60
xor ebx, ebx
jmp 0x43fbb8
mov eax, dword [edi]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, edi
call dword [eax + 0x5c]
jmp 0x43fbb6
mov eax, dword [edi]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, edi
call dword [eax + 0x6c]
jmp 0x43fbb6
cmp esi, 0x10
jne 0x43f900
push esi
push dword [edi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SwitchToThisWindow]
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push dword [edi + 4]
call esi
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push dword [edi + 4]
call esi
jmp 0x43fbb8
cmp esi, 0x11
jne 0x43fbb8
push esi
push dword [edi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, edi
call fcn.00443ad0
jmp 0x43fbb8
cmp ecx, 0x7e8
ja 0x43fb37
je 0x43fb05
mov eax, ecx
sub eax, 0x40a
je 0x43fa85
sub eax, 0x5a
je 0x43f98a
sub eax, 0x12d
jne case.0x43f686.4
test esi, esi
je 0x43fbb8
mov ecx, dword [esi + 0x24]
test ecx, ecx
je 0x43f97a
mov eax, dword [ecx]
call dword [eax + 8]
mov ecx, dword [esi + 0x24]
test ecx, ecx
je 0x43f97a
mov edx, dword [ecx]
cmp ecx, esi
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov dword [esi + 0x24], ebx
push 0x28
push esi
call fcn.004727ef
add esp, 8
jmp 0x43fbb8
lea eax, [ebp - 0x34]
push eax
call fcn.00425550
mov ecx, eax
call fcn.004246b0
mov edx, dword [0x5ceacc]
xor eax, eax
mov ecx, edx
mov dword [ebp - 4], 2
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43f9c0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.0041cb00
mov ecx, dword [ebp - 0x34]
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 3
call fcn.0050eed0
mov edx, dword [ebp - 0x14]
mov esi, eax
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x43fa29
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fa1f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43fc70
push edx
push ecx
call fcn.004727ef
add esp, 8
test esi, esi
jne 0x43fa3a
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x43fa45
push 0
push 0
mov ecx, edi
call fcn.0048b7a0
mov esi, dword [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x43fbb8
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x43fbb8
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x43fbb8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
jmp 0x43fbb8
call fcn.00415c50
mov ecx, eax
test ecx, ecx
je 0x43fc75
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
push str.play
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0
call fcn.0040e400
test al, al
jne 0x43fac6
push 4
push str.play
lea ecx, [ebp - 0x30]
call fcn.0041afc0
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 1
push eax
mov ecx, edi
call fcn.004458e0
mov edx, dword [ebp - 0x30]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43f735
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor ebx, ebx
jmp 0x43fbb8
mov ecx, dword [edi + 0x3a8]
test ecx, ecx
je 0x43fb2b
call fcn.0044a350
mov ecx, dword [edi + 0x3a8]
test ecx, ecx
je 0x43fb25
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov dword [edi + 0x3a8], ebx
mov ecx, edi
call fcn.0043e680
jmp 0x43fbb8
sub ecx, 0x7e9
je 0x43fba2
sub ecx, 1
je 0x43fb49
mov dword [ebp - 0x2c], ebx
jmp 0x43fbb8
push 0xb
push str.start_delay
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.0041ca10
push 0
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 4
push eax
lea ecx, [edi + 0x3b0]
call fcn.0050c330
lea ecx, [ebp - 0x28]
imul esi, eax, 0x3e8
mov dword [ebp - 4], 0xffffffff
call fcn.004078d0
push 0
push esi
push 0x11
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x43fbb8
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
push dword [ebp + 0x10]
push esi
push 0x7e9
call fcn.00441d50
mov ebx, eax
mov eax, dword [edi + 0x360]
mov esi, dword [ebp + 8]
test eax, eax
je 0x43fc3a
cmp esi, eax
jne 0x43fc3a
mov eax, dword [ebp + 0x10]
add eax, 0xfffffdfe
cmp eax, 1
ja 0x43fc38
cmp dword [0x5ceb68], 0
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
je 0x43fbf4
call ebx
sub eax, dword [0x5ceb68]
cmp eax, 0x1f4
jb 0x43fc31
call ebx
cmp dword [edi + 0x37c], 0
mov dword [0x5ceb68], eax
je 0x43fc26
push dword [edi + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x43fc26
mov ecx, dword [edi + 0x37c]
push 1
push 1
add ecx, 0x280
call fcn.0048b7a0
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x2c], 1
xor ebx, ebx
cmp dword [ebp - 0x2c], 0
je 0x43fc44
mov eax, ebx
jmp 0x43fc52
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp - 0x38]
push esi
call fcn.00495c10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0047268d
mov esp, ebp
pop ebp
ret 0xc
call fcn.005229b9
push 0x80004005
call fcn.0040e3e0
nop
invalid