Function at 0x41bda0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x19
push 0
push 0
dec ecx
jne 0x41bda9
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.0040461c
mov eax, dword [ebp - 8]
call fcn.0040461c
mov eax, dword [ebp - 0xc]
call fcn.0040461c
mov eax, dword [ebp + 0x1c]
call fcn.0040461c
mov eax, dword [ebp + 0x18]
call fcn.0040461c
mov eax, dword [ebp + 0x14]
call fcn.0040461c
xor eax, eax
push ebp
push 0x41c586
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x61], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x60]
mov edx, dword [ebp - 4]
call fcn.00404220
mov edx, dword [ebp - 0x60]
mov eax, 0x41c5a0
call fcn.0040eafc
mov ebx, eax
test ebx, ebx
jle 0x41be4b
mov eax, dword [ebp - 0x60]
call fcn.0040442c
sub eax, 3
cmp ebx, eax
jne 0x41be4b
lea eax, [ebp - 0x60]
push eax
mov ecx, ebx
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x60]
call fcn.0040468c
mov dword [ebp - 0x24], 1
lea eax, [ebp - 0xab]
xor ecx, ecx
mov edx, 0x4a
call fcn.00402d2c
mov eax, dword [ebp + 8]
call fcn.00404188
mov eax, dword [ebp + 0x24]
mov byte [eax], 0
push 0
push 1
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call dword [ebp + 0x20]
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
call fcn.00406f1c
test al, al
je 0x41c3ff
lea eax, [ebp - 0xab]
xor ecx, ecx
mov edx, 0x4a
call fcn.00402d2c
lea ecx, [ebp - 0xab]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00417094
mov eax, dword [ebp - 0xa7]
xor edx, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x24], 1
jne 0x41bef0
mov eax, dword [ebp - 0xa3]
xor edx, edx
push edx
push eax
mov eax, dword [0x428dcc]
mov edx, 0x41c5b0
call fcn.00404848
call fcn.00404d84
call fcn.004030b0
mov edx, dword [ebp - 0x65]
mov eax, dword [ebp - 4]
call fcn.00416d48
mov edx, dword [ebp - 0x9b]
cmp eax, edx
je 0x41bf18
cmp eax, 0x4d2
je 0x41bf18
cmp edx, 0x4d2
je 0x41bf18
xor eax, eax
jmp 0x41bf1a
mov al, 1
mov edx, dword [ebp + 0x24]
mov byte [edx], al
mov eax, dword [ebp + 0x24]
cmp byte [eax], 0
je 0x41c4ee
mov edx, 0x40
mov eax, dword [ebp - 4]
call fcn.00406dd8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
call fcn.0040b370
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x10]
xor eax, eax
call fcn.00416c6c
test al, al
je 0x41bf81
mov eax, dword [ebp - 0x10]
call fcn.0041701c
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0
jne 0x41bf73
cmp dword [ebp - 0x38], 0
jbe 0x41bf81
jmp 0x41bf75
jle 0x41bf81
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
mov eax, dword [0x428dcc]
mov edx, 0x41c5d0
call fcn.00404848
call fcn.00404d84
call fcn.004030b0
mov eax, dword [0x428f04]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x9f]
jne 0x41c3f7
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0040b274
cmp dword [ebp - 0x24], 1
jne 0x41bfdc
push 0
push 1
push 0
mov ecx, dword [ebp - 0xa3]
xor edx, edx
xor eax, eax
call dword [ebp + 0x20]
xor eax, eax
push ebp
push 0x41bffc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.00406f50
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41c042
xor eax, eax
call fcn.0040edd0
lea edx, [ebp - 0x14]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.00406e54
cmp dword [ebp - 0x14], 0
setg bl
mov eax, dword [ebp - 0x14]
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 0x14]
call fcn.004047b8
lea edx, [ebp - 0x48]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.0041bba8
mov eax, dword [ebp - 0x14]
add eax, 4
cdq
add dword [ebp - 0x40], eax
adc dword [ebp - 0x3c], edx
inc dword [ebp - 0x18]
xor eax, eax
mov al, byte [ebp - 0xaa]
cmp eax, dword [ebp - 0x18]
jne 0x41c0a7
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x20], edx
cmp eax, dword [ebp - 0x18]
jge 0x41c236
test bl, bl
je 0x41c0c3
lea edx, [ebp - 0x4c]
xor ecx, ecx
mov eax, dword [ebp - 0x48]
call fcn.00412fcc
jmp 0x41c0ce
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
call fcn.00404220
mov edx, dword [ebp - 0x4c]
mov eax, 0x41c614
call fcn.00404770
mov ebx, eax
lea eax, [ebp - 0x48]
push eax
mov ecx, ebx
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x4c]
call fcn.0040468c
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x4c]
call fcn.0040442c
mov ecx, eax
lea edx, [ebx + 1]
mov eax, dword [ebp - 0x4c]
call fcn.0040468c
cmp dword [ebp - 0x48], 0
je 0x41c236
mov edx, dword [ebp - 0x48]
mov eax, 0x41c620
call fcn.00404770
test eax, eax
jle 0x41c130
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x48]
call fcn.004041dc
lea eax, [ebp - 0x50]
push eax
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x48]
call fcn.0040e260
lea eax, [ebp - 0x54]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x48]
call fcn.0040e260
mov edx, dword [ebp - 0x50]
mov eax, 0x41c620
call fcn.00404770
test eax, eax
jle 0x41c190
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x50]
call fcn.004041dc
lea eax, [ebp - 0x50]
push eax
mov edx, dword [ebp - 0x50]
mov eax, 0x41c620
call fcn.00404770
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x50]
call fcn.0040468c
push dword [ebp - 8]
push 0x41c62c
push dword [ebp - 0x50]
lea eax, [ebp - 0x5c]
mov edx, 3
call fcn.004044ec
mov eax, dword [ebp - 0x5c]
call fcn.00406f1c
test al, al
jne 0x41c1c6
push 0
push 1
push 0
xor ecx, ecx
xor edx, edx
mov eax, 1
call dword [ebp + 0x20]
push 0
push 1
xor edx, edx
mov eax, dword [ebp - 0x54]
call fcn.00406d74
mov ecx, eax
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
call fcn.0040b578
test al, al
jne 0x41c236
inc dword [0x428ca4]
cmp dword [0x428ca4], 1
jne 0x41c236
push 0
push 0
push dword [ebp - 0x5c]
push 0x41c638
lea ecx, [ebp - 0xbc]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
call fcn.0041bc40
push dword [ebp - 0xbc]
lea eax, [ebp - 0xb8]
mov edx, 3
call fcn.004044ec
mov edx, dword [ebp - 0xb8]
xor ecx, ecx
xor eax, eax
call fcn.0040f204
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x40]
sbb edx, dword [ebp - 0x3c]
cmp edx, 0
jne 0x41c24e
cmp eax, 0x4a
jbe 0x41c25d
jmp 0x41c250
jle 0x41c25d
call fcn.00416ac0
test al, al
je 0x41c042
cmp dword [ebp - 0x24], 1
jne 0x41c3f7
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 0xc]
call fcn.0040732c
mov edx, dword [ebp - 0xc0]
lea eax, [ebp - 0xc]
call fcn.00404220
cmp dword [ebp - 0xc], 0
je 0x41c3f7
mov cl, 1
mov edx, dword [ebp - 4]
mov eax, 0x41c66c
call fcn.0040ec5c
test al, al
jne 0x41c2b7
mov cl, 1
mov edx, dword [ebp - 4]
mov eax, 0x41c67c
call fcn.0040ec5c
test al, al
je 0x41c3f7
lea ecx, [ebp - 0xab]
mov edx, dword [ebp - 0x10]
xor eax, eax
call fcn.00417094
push 0
push 0
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0040b274
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 0x20]
call fcn.004047b8
lea eax, [ebp - 0x48]
call fcn.00404684
mov edx, eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00406e54
xor eax, eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x48]
call fcn.00404684
lea edx, [eax + 0xfc]
lea eax, [ebp - 0x1c]
mov ecx, 4
call fcn.00402694
push dword [ebp - 0x93]
push dword [ebp - 0x97]
call fcn.0041badc
push edx
push eax
call fcn.0040e108
mov dword [ebp - 0x97], eax
mov dword [ebp - 0x93], edx
mov byte [ebp - 0x66], 1
mov dword [ebp - 0x65], 0x4a
lea eax, [ebp - 0x4c]
mov edx, 0x4a
call fcn.004047b8
lea eax, [ebp - 0x4c]
call fcn.00404684
mov edx, eax
lea eax, [ebp - 0xab]
mov ecx, 0x4a
call fcn.00402694
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
call fcn.00404434
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00406eb4
push eax
push dword [ebp - 8]
push 0x41c62c
push dword [ebp - 0xc]
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.004044ec
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0x48]
pop ecx
call fcn.0040b578
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x428dcc]
call fcn.00404d84
mov edx, 0x41c690
call fcn.00404848
push eax
push dword [ebp - 8]
push 0x41c62c
push dword [ebp - 0xc]
lea eax, [ebp - 0xc8]
mov edx, 3
call fcn.004044ec
mov edx, dword [ebp - 0xc8]
pop eax
call fcn.00404848
call fcn.004030b0
mov eax, dword [ebp - 0x10]
call fcn.00406eac
lea eax, [ebp - 0xab]
call fcn.00416a90
test al, al
je 0x41c4d5
mov al, 1
call fcn.0040ef80
inc dword [ebp - 0x24]
push dword [ebp - 0x60]
push 0x41c6a8
lea ecx, [ebp - 0xcc]
mov edx, 3
mov eax, dword [ebp - 0x24]
call fcn.0040f738
push dword [ebp - 0xcc]
lea eax, [ebp - 4]
mov edx, 3
call fcn.004044ec
cmp byte [ebp + 0xc], 0
jne 0x41c45c
mov eax, dword [ebp - 4]
call fcn.00406f1c
test al, al
jne 0x41c4c3
mov eax, dword [ebp - 4]
call fcn.0040c770
push 0
push 0
lea eax, [ebp - 0x44]
push eax
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0x24]
call fcn.00406c60
mov ecx, dword [ebp - 0xd0]
mov edx, 0x41c6b4
mov eax, dword [ebp + 0x1c]
call fcn.0040fb64
mov eax, dword [ebp + 0x14]
push eax
mov al, byte [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp - 0x44]
xor eax, eax
call fcn.0040f3c8
mov byte [ebp - 0x61], al
xor edx, edx
mov eax, 0x1f4
call fcn.0040ee08
mov eax, dword [ebp - 4]
call fcn.00406f1c
test al, al
jne 0x41c4c3
cmp byte [ebp - 0x61], 0
jne 0x41c464
push 0
push 1
push 0
xor ecx, ecx
xor edx, edx
mov eax, 1
call dword [ebp + 0x20]
lea eax, [ebp - 0xab]
call fcn.00416a90
test al, al
je 0x41c4ee
cmp byte [ebp - 0x61], 0
jne 0x41be86
cmp byte [ebp - 0x61], 0
jne 0x41c4fc
mov eax, dword [ebp + 8]
call fcn.00404188
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [ebp - 0x28]
xor edx, edx
push edx
push eax
mov eax, dword [0x428dcc]
mov edx, 0x41c6c8
call fcn.00404848
call fcn.00404d84
mov edx, 0x41c6e4
call fcn.00404848
call fcn.004030b0
mov eax, dword [0x428dcc]
call fcn.004030b0
xor edx, edx
mov eax, 0x1f4
call fcn.0040ee08
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41c58d
lea eax, [ebp - 0xd0]
mov edx, 9
call fcn.004041ac
lea eax, [ebp - 0x60]
mov edx, 8
call fcn.004041ac
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004041ac
lea eax, [ebp + 0x14]
mov edx, 3
call fcn.004041ac
ret