Function at 0x41ce40
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x60
push ebx
push ebp
push esi
push edi
mov esi, ecx
mov eax, dword [esi]
mov edx, dword [eax + 4]
push 0
push 1
call edx
test eax, eax
je 0x41d266
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ecx, dword [esi + 0x2468]
mov dword [esi + 0x26ac], eax
cmp ecx, 0xa
jb 0x41ce80
mov ecx, 0xa
mov dword [esi + 0x26d8], eax
mov dword [esp + 0x10], eax
lea eax, [esi + 0x62cd8]
push eax
mov dword [esi + 0x2468], ecx
call fcn.00451e09
add esp, 4
push 0
mov ecx, esi
call fcn.0041bc40
test eax, eax
je 0x41d266
cmp dword [esi + 0x5d118], 7
je 0x41ced6
cmp dword [esi + 0x26a8], 0
je 0x41ced6
call edi
sub eax, dword [esi + 0x26ac]
cmp eax, dword [esi + 0x26a8]
ja 0x41d277
xor eax, eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
push 0xb
lea eax, [esp + 0x48]
push eax
mov ecx, esi
mov dword [esp + 0x4c], 0
call fcn.00414fc0
cmp eax, 1
jbe 0x41d235
push 0x1f4
push 0
lea ecx, [esp + 0x4c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov ebp, eax
mov dword [esp + 0x14], ebp
call edi
mov ebx, eax
sub eax, dword [esp + 0x10]
mov dword [esp + 0x24], ebx
cmp eax, 0x1f4
jb 0x41d081
mov edx, dword [esi + 0x26cc]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x28]
lea edi, [esi + 0x26b4]
push eax
mov ecx, edi
mov dword [esp + 0x2c], edx
call fcn.0041abe0
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
sar ecx, 3
cmp ecx, 6
jbe 0x41cfa6
mov ebp, dword [edi + 0xc]
cmp ebp, dword [edi + 0x10]
jbe 0x41cf92
call fcn.00450a96
mov eax, dword [edi]
push ebp
push eax
lea edx, [esp + 0x44]
push edx
mov ecx, edi
call fcn.00417c30
mov ebp, dword [esp + 0x14]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
and eax, 0xfffffff8
cmp eax, 0x30
jne 0x41d06d
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
xor ebp, ebp
sar ecx, 3
xor ebx, ebx
mov dword [esp + 0x10], ebp
test ecx, ecx
jbe 0x41d011
lea ecx, [ecx]
mov edx, dword [edi + 0x10]
sub edx, dword [edi + 0xc]
sar edx, 3
cmp ebx, edx
jb 0x41cfe2
call fcn.00450a96
mov eax, dword [edi + 0xc]
mov edx, dword [edi + 0x10]
mov ecx, dword [eax + ebx*8 + 4]
add dword [esp + 0x10], ecx
sub edx, eax
sar edx, 3
cmp ebx, edx
jb 0x41cffe
call fcn.00450a96
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x10]
add ebp, dword [eax + ebx*8]
sub ecx, eax
inc ebx
sar ecx, 3
cmp ebx, ecx
jb 0x41cfd0
mov dword [esp + 0x18], ebp
fild dword [esp + 0x18]
test ebp, ebp
jge 0x41d023
fadd qword [0x485e68]
mov edx, dword [esp + 0x10]
fild dword [esp + 0x10]
test edx, edx
jge 0x41d035
fadd qword [0x485e68]
fdivp st(1)
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x14]
fmul qword [0x485e60]
fnstcw word [esp + 0x10]
movzx eax, word [esp + 0x10]
or eax, 0xc00
mov dword [esp + 0x18], eax
fldcw word [esp + 0x18]
fistp qword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov dword [esi + 0x26b0], eax
fldcw word [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x10], ebx
mov dword [esi + 0x26cc], 0
lea ecx, [esp + 0x30]
push ecx
call fcn.00451e09
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
add esp, 4
sub edx, dword [esi + 0x62cd8]
sbb eax, dword [esi + 0x62cdc]
mov dword [esi + 0x62ce0], edx
mov edx, dword [esi + 0x26b0]
mov dword [esi + 0x62ce4], eax
test edx, edx
je 0x41d0eb
mov eax, dword [esi + 0x5d120]
mov ecx, dword [esi + 0x5d124]
mov ebx, eax
and ebx, ecx
cmp ebx, 0xffffffff
je 0x41d0eb
sub eax, dword [esi + 0x5d130]
push 0
sbb ecx, dword [esi + 0x5d134]
push edx
push ecx
push eax
call fcn.004525a0
mov dword [esi + 0x62cec], edx
jmp 0x41d0f3
xor eax, eax
mov dword [esi + 0x62cec], eax
mov dword [esi + 0x62ce8], eax
cmp ebp, 0xffffffff
je case.default.0x41d1b3
cmp ebp, 0x102
jne 0x41d150
cmp dword [esi + 0x246c], 6
jne 0x41ceb0
call edi
mov ecx, eax
sub ecx, dword [esi + 0x26a4]
cmp ecx, 0x3e8
jbe 0x41ceb0
mov edx, dword [esi]
push 0
mov dword [esi + 0x26a4], eax
mov eax, dword [edx + 4]
push 6
mov ecx, esi
call eax
test eax, eax
jne 0x41ceb0
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
test ebp, ebp
je 0x41d26e
mov ecx, dword [esi + 0x26f4]
sub ecx, dword [esi + 0x26f0]
lea edi, [ebp - 1]
sar ecx, 2
cmp edi, ecx
jb 0x41d173
call fcn.00450a96
mov edx, dword [esi + 0x26f0]
mov ebx, dword [edx + edi*4]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x26d0], eax
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x41d1a7
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov eax, dword [ebx + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebx + 0x10], 0
mov ebx, dword [ebx + 0x28]
cmp ebx, 0xa
ja case.default.0x41d1b3
jmp dword [ebx*4 + 0x41d28c]
push edi
mov ecx, esi
call fcn.00418e60
jmp 0x41d226
push edi
mov ecx, esi
call fcn.0041c380
jmp 0x41d226
push edi
mov ecx, esi
call fcn.00418f00
jmp 0x41d226
push edi
mov ecx, esi
call fcn.0041c460
jmp 0x41d226
push edi
mov ecx, esi
call fcn.00419020
jmp 0x41d226
push edi
mov ecx, esi
call fcn.0041c9a0
jmp 0x41d226
push edi
mov ecx, esi
call fcn.004190d0
jmp 0x41d226
push edi
mov ecx, esi
call fcn.0041ca90
jmp 0x41d226
push edi
mov ecx, esi
call fcn.004191f0
jmp 0x41d226
push edi
mov ecx, esi
call fcn.0041cca0
jmp 0x41d226
push edi
mov ecx, esi
call fcn.0041bd20
test eax, eax
je case.default.0x41d1b3
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x41ceb0
cmp dword [esi + 0x2714], 0
je 0x41d266
mov ecx, dword [esi + 0x5d134]
cmp ecx, dword [esi + 0x5d124]
ja 0x41d266
jb case.default.0x41d1b3
mov edx, dword [esi + 0x5d130]
cmp edx, dword [esi + 0x5d120]
jae 0x41d266
mov dword [esi + 0x5d118], 8
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esi + 0x5d118], 7
je 0x41d266
pop edi
mov dword [esi + 0x5d118], 9
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret