Function at 0x417024
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
mov eax, dword [0x5836e0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 0x114], esi
call fcn.00424465
xor ebx, ebx
inc ebx
test al, al
jne 0x417073
push 0xfffffffffffffff0
push dword [0x5a22a4]
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x8000000
je 0x417073
push ebx
push dword [0x5a22a4]
call dword [sym.imp.USER32.dll_EnableWindow]
and dword [ebp - 0x10c], 0
lea eax, [ebp - 0x10c]
push 0
push eax
push 0x5298a4
mov ecx, edi
call fcn.0041863e
mov byte [ebp - 0x105], al
test al, al
je 0x4170ab
cmp dword [edi + 0x2688], 0
jne 0x4170ab
push ebx
push ebx
mov ecx, edi
call fcn.0041cb64
push 0xffffffffffffffec
push dword [0x5a22a4]
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [0x5a23ec]
cmp byte [ecx + 0x10fa6], 0
jne 0x4170d7
test al, 8
je 0x4170d7
lea ecx, [edi + 0x180]
call fcn.004295ca
mov ecx, dword [edi + 0x3e6c]
call fcn.004bc1a0
call fcn.004d2427
cmp dword [edi + 0x459c], 0
jne 0x417115
cmp dword [0x5a2400], 0
jg 0x417125
cmp byte [edi + 0x5477], 0
je 0x417125
mov ecx, edi
call fcn.004118fa
mov byte [edi + 0x5477], 0
jmp 0x417542
cmp byte [edi + 0x5478], 0
jne 0x417125
mov byte [edi + 0x5478], 0
call fcn.004d592f
call fcn.004d7fe5
cmp byte [edi + 0x4550], 0
movzx eax, al
mov dword [ebp - 0x110], eax
je 0x4171e9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x5a23ec]
sub eax, dword [edi + 0x4554]
cmp eax, dword [ecx + 0x1117c]
jbe 0x4171e9
push dword [edi + 0x454c]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4171db
test esi, esi
je 0x4171db
push 0x1510001
push 0x22
push 0x100
mov ecx, esi
mov byte [edi + 0x4550], 0
call fcn.004de78b
mov ecx, eax
call fcn.004843c1
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
mov ecx, dword [ebp - 0x114]
push 0xc1510001
push 0x22
push 0x101
call fcn.004de78b
mov ecx, eax
call fcn.004843c1
push eax
call esi
call fcn.004d7fe5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi + 0x4554], eax
mov byte [edi + 0x4550], bl
jmp 0x4171e9
and dword [edi + 0x454c], 0
mov byte [edi + 0x4550], 0
mov ecx, dword [edi + 0x3e68]
test ecx, ecx
je 0x4171f8
call fcn.0044f562
cmp dword [ebp - 0x110], 0
jne 0x417223
cmp byte [edi + 0x4549], 0
je 0x417223
push 0
push 0
mov byte [edi + 0x4549], 0
call fcn.004d74be
pop ecx
pop ecx
mov ecx, edi
call fcn.0040f3f8
lea ebx, [edi + 0x180]
push 0
mov ecx, ebx
call fcn.00432292
test al, al
jne 0x417264
test byte [edi + 0x3ebc], 0x80
jne 0x417247
cmp byte [edi + 0x3ec0], al
je 0x41725d
push 0
mov ecx, ebx
call fcn.004323d7
test al, al
jne 0x41725d
push 0
mov ecx, ebx
call fcn.00431bf7
call fcn.004d5c53
jmp 0x417274
cmp byte [edi + 0x3ec0], 0
je 0x417274
mov byte [edi + 0x3ec0], 0
mov eax, dword [0x5a22a0]
lea ecx, [eax + 0x180]
call fcn.0043234d
test al, al
je 0x417426
mov dl, byte [ebp - 0x105]
test dl, dl
jne 0x41732c
cmp dword [edi + 0x36c], 0
je 0x417438
mov ecx, ebx
call fcn.00431bac
xor ebx, ebx
inc ebx
mov dl, byte [ebp - 0x105]
mov esi, dword [ebp - 0x114]
test esi, esi
je 0x41745f
mov eax, dword [0x5a23ec]
mov cl, byte [esi + 0x1578]
cmp byte [eax + 0x11007], 0
je 0x4172e6
test dl, dl
jne 0x4172e6
cmp dword [ebp - 0x110], 0
je 0x4172e8
xor bl, bl
cmp cl, bl
je 0x4172f9
mov ecx, edi
mov byte [esi + 0x1578], bl
call fcn.0040f3f8
cmp dword [ebp - 0x10c], 0
je 0x417440
mov ecx, esi
call fcn.004dbfc5
cmp dword [ebp - 0x10c], eax
jne 0x417440
mov ecx, esi
call fcn.004de78b
mov ecx, eax
call fcn.00488dad
jmp 0x41745f
push 0
mov ecx, ebx
call fcn.00432292
test al, al
jne 0x4172ae
push 0
mov ecx, ebx
call fcn.004323d7
test al, al
jne 0x4172ae
cmp dword [edi + 0x314], 0x51f
jne 0x4172ae
push 1
mov ecx, edi
call fcn.0041ef6e
xor edx, edx
movzx ecx, al
cmp dword [edi + 0x36c], edx
mov byte [ebp - 0x106], al
setne dl
cmp ecx, edx
je 0x4172ae
mov esi, dword [sym.imp.USER32.dll_KillTimer]
xor ecx, ecx
test al, al
push 3
setne cl
mov dword [edi + 0x36c], ecx
push dword [0x5a22a4]
call esi
push 4
push dword [0x5a22a4]
call esi
mov cl, byte [ebp - 0x106]
xor eax, eax
test cl, cl
sete al
add eax, 3
movzx eax, ax
mov dword [ebp - 0x118], eax
mov eax, dword [0x5a23ec]
test cl, cl
je 0x4173d4
mov esi, dword [eax + 0x10f9c]
jmp 0x4173da
mov esi, dword [eax + 0x10fa0]
test esi, esi
je 0x417412
xor ebx, ebx
mov edx, str.Timer_TIMER_CAPTION_DISAPPEAR_ID_
inc ebx
mov eax, 0x5298c0
test cl, cl
mov ecx, edi
push ebx
push ebx
cmove eax, edx
push eax
call fcn.00410feb
mov eax, dword [ebp - 0x118]
mov ecx, edi
push esi
movzx eax, ax
push eax
push ebx
call fcn.0041afbd
jmp 0x4172b1
test cl, cl
mov ecx, ebx
je 0x4172a9
call fcn.00431b5d
jmp 0x4172ae
cmp dword [edi + 0x36c], 0
je 0x4172ae
jmp 0x4172a7
xor ebx, ebx
inc ebx
jmp 0x4172b7
cmp byte [ebp - 0x105], 0
je 0x41745f
cmp byte [esi + 0x1c], 0
je 0x41745f
push 0
mov ecx, esi
call fcn.004de78b
mov ecx, eax
call fcn.00488c70
cmp dword [edi + 0x77b4], 0
je 0x41747a
cmp byte [edi + 0x77b8], 0
jne 0x41747a
push 0
mov ecx, edi
call fcn.0041ed47
mov ecx, dword [edi + 0x3e60]
call fcn.00459ebe
test eax, eax
je 0x4174fe
cmp dword [edi + 0x3e70], 0
je 0x4174fe
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0x118]
push dword [ebp - 0x11c]
call dword [sym.imp.USER32.dll_WindowFromPoint]
test eax, eax
je 0x4174fe
push 0x80
lea ecx, [ebp - 0x104]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x4174fe
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
lea eax, [ebp - 0x104]
mov ebx, str.VirtualConsoleClass
push ebx
push eax
call esi
test eax, eax
je 0x4174f3
push ebx
lea eax, [ebp - 0x104]
push eax
call esi
test eax, eax
jne 0x4174fe
mov ecx, dword [edi + 0x3e70]
call fcn.004ec9ab
push 0
push str.TIMER_MAIN_ID
push 0
push 0
push 0
push 0
mov ecx, edi
call fcn.00411db8
cmp dword [ebp - 0x110], 0
mov ecx, dword [0x5a23ec]
jne 0x41753d
cmp byte [ecx + 0x1160d], 0
je 0x41753d
add ecx, 0x11608
call fcn.004ce07e
mov ecx, dword [0x5a23ec]
call fcn.00463954
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004f4166
leave
ret 4