Function at 0x41f188
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x19
push 0
push 0
dec ecx
jne 0x41f191
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.0040486c
mov eax, dword [ebp - 8]
call fcn.0040486c
mov eax, dword [ebp - 0xc]
call fcn.0040486c
mov eax, dword [ebp + 0x1c]
call fcn.0040486c
mov eax, dword [ebp + 0x18]
call fcn.0040486c
mov eax, dword [ebp + 0x14]
call fcn.0040486c
xor eax, eax
push ebp
push 0x41f982
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x61], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x60]
mov edx, dword [ebp - 4]
call fcn.00404470
mov edx, dword [ebp - 0x60]
mov eax, 0x41f99c
call fcn.0040cad0
mov ebx, eax
test ebx, ebx
jle 0x41f233
mov eax, dword [ebp - 0x60]
call fcn.0040467c
sub eax, 3
cmp ebx, eax
jne 0x41f233
lea eax, [ebp - 0x60]
push eax
mov ecx, ebx
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x60]
call fcn.004048dc
mov dword [ebp - 0x24], 1
lea eax, [ebp - 0xab]
xor ecx, ecx
mov edx, 0x4a
call fcn.00402de0
mov eax, dword [ebp + 8]
call fcn.004043d8
mov eax, dword [ebp + 0x24]
mov byte [eax], 0
push 0
push 1
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call dword [ebp + 0x20]
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
call fcn.00407624
test al, al
je 0x41f7f7
lea eax, [ebp - 0xab]
xor ecx, ecx
mov edx, 0x4a
call fcn.00402de0
lea ecx, [ebp - 0xab]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0041a25c
mov eax, dword [ebp - 0xa7]
xor edx, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x24], 1
jne 0x41f2d8
mov eax, dword [ebp - 0xa3]
xor edx, edx
push edx
push eax
mov eax, dword [0x42adc4]
mov edx, 0x41f9ac
call fcn.00404a98
call fcn.00405220
call fcn.00403164
mov edx, dword [ebp - 0x65]
mov eax, dword [ebp - 4]
call fcn.00419f10
mov edx, dword [ebp - 0x9b]
cmp eax, edx
je 0x41f300
cmp eax, 0x4d2
je 0x41f300
cmp edx, 0x4d2
je 0x41f300
xor eax, eax
jmp 0x41f302
mov al, 1
mov edx, dword [ebp + 0x24]
mov byte [edx], al
mov eax, dword [ebp + 0x24]
cmp byte [eax], 0
je 0x41f8e8
mov edx, 0x40
mov eax, dword [ebp - 4]
call fcn.004074e0
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
call fcn.0040ff00
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x10]
xor eax, eax
call fcn.00419e34
test al, al
je 0x41f369
mov eax, dword [ebp - 0x10]
call fcn.0041a1e4
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0
jne 0x41f35b
cmp dword [ebp - 0x38], 0
jbe 0x41f369
jmp 0x41f35d
jle 0x41f369
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
mov eax, dword [0x42adc4]
mov edx, 0x41f9cc
call fcn.00404a98
call fcn.00405220
call fcn.00403164
mov eax, dword [0x42af00]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x9f]
jne 0x41f7ef
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0040fe04
cmp dword [ebp - 0x24], 1
jne 0x41f3c4
push 0
push 1
push 0
mov ecx, dword [ebp - 0xa3]
xor edx, edx
xor eax, eax
call dword [ebp + 0x20]
xor eax, eax
push ebp
push 0x41f3e4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.00407658
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41f42a
xor eax, eax
call fcn.0040cda4
lea edx, [ebp - 0x14]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.0040755c
cmp dword [ebp - 0x14], 0
setg bl
mov eax, dword [ebp - 0x14]
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 0x14]
call fcn.00404a08
lea edx, [ebp - 0x48]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.0041ef90
mov eax, dword [ebp - 0x14]
add eax, 4
cdq
add dword [ebp - 0x40], eax
adc dword [ebp - 0x3c], edx
inc dword [ebp - 0x18]
xor eax, eax
mov al, byte [ebp - 0xaa]
cmp eax, dword [ebp - 0x18]
jne 0x41f48f
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x20], edx
cmp eax, dword [ebp - 0x18]
jge 0x41f62e
test bl, bl
je 0x41f4ab
lea edx, [ebp - 0x4c]
xor ecx, ecx
mov eax, dword [ebp - 0x48]
call fcn.004169fc
jmp 0x41f4b6
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
call fcn.00404470
mov edx, dword [ebp - 0x4c]
mov eax, 0x41fa10
call fcn.004049c0
mov ebx, eax
lea eax, [ebp - 0x48]
push eax
mov ecx, ebx
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x4c]
call fcn.004048dc
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x4c]
call fcn.0040467c
mov ecx, eax
lea edx, [ebx + 1]
mov eax, dword [ebp - 0x4c]
call fcn.004048dc
cmp dword [ebp - 0x48], 0
je 0x41f62e
mov edx, dword [ebp - 0x48]
mov eax, 0x41fa1c
call fcn.004049c0
test eax, eax
jle 0x41f518
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x48]
call fcn.0040442c
push 0
lea eax, [ebp - 0x50]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x48]
mov eax, dword [0x413c8c]
call fcn.00413d5c
push 0
lea eax, [ebp - 0x54]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x48]
mov eax, dword [0x413c8c]
call fcn.00413d5c
mov edx, dword [ebp - 0x50]
mov eax, 0x41fa1c
call fcn.004049c0
test eax, eax
jle 0x41f582
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x50]
call fcn.0040442c
lea eax, [ebp - 0x50]
push eax
mov edx, dword [ebp - 0x50]
mov eax, 0x41fa1c
call fcn.004049c0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x50]
call fcn.004048dc
push dword [ebp - 8]
push 0x41fa28
push dword [ebp - 0x50]
lea eax, [ebp - 0x5c]
mov edx, 3
call fcn.0040473c
mov eax, dword [ebp - 0x5c]
call fcn.00407624
test al, al
jne 0x41f5b8
push 0
push 1
push 0
xor ecx, ecx
xor edx, edx
mov eax, 1
call dword [ebp + 0x20]
mov eax, dword [0x42adc0]
mov eax, dword [eax]
push eax
push 1
xor edx, edx
mov eax, dword [ebp - 0x54]
call fcn.0040747c
mov ecx, eax
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
call fcn.00410108
test al, al
jne 0x41f62e
inc dword [0x42ace4]
cmp dword [0x42ace4], 1
jne 0x41f62e
push 0
push 0
push dword [ebp - 0x5c]
push 0x41fa34
lea ecx, [ebp - 0xbc]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
call fcn.0041f028
push dword [ebp - 0xbc]
lea eax, [ebp - 0xb8]
mov edx, 3
call fcn.0040473c
mov edx, dword [ebp - 0xb8]
xor ecx, ecx
xor eax, eax
call fcn.0040d23c
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x40]
sbb edx, dword [ebp - 0x3c]
cmp edx, 0
jne 0x41f646
cmp eax, 0x4a
jbe 0x41f655
jmp 0x41f648
jle 0x41f655
call fcn.00419c88
test al, al
je 0x41f42a
cmp dword [ebp - 0x24], 1
jne 0x41f7ef
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 0xc]
call fcn.00407a34
mov edx, dword [ebp - 0xc0]
lea eax, [ebp - 0xc]
call fcn.00404470
cmp dword [ebp - 0xc], 0
je 0x41f7ef
mov cl, 1
mov edx, dword [ebp - 4]
mov eax, 0x41fa68
call fcn.0040cc30
test al, al
jne 0x41f6af
mov cl, 1
mov edx, dword [ebp - 4]
mov eax, 0x41fa78
call fcn.0040cc30
test al, al
je 0x41f7ef
lea ecx, [ebp - 0xab]
mov edx, dword [ebp - 0x10]
xor eax, eax
call fcn.0041a25c
push 0
push 0
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0040fe04
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 0x20]
call fcn.00404a08
lea eax, [ebp - 0x48]
call fcn.004048d4
mov edx, eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.0040755c
xor eax, eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x48]
call fcn.004048d4
lea edx, [eax + 0xfc]
lea eax, [ebp - 0x1c]
mov ecx, 4
call fcn.004026b4
push dword [ebp - 0x93]
push dword [ebp - 0x97]
call fcn.0041ee70
push edx
push eax
call fcn.0040c2e4
mov dword [ebp - 0x97], eax
mov dword [ebp - 0x93], edx
mov byte [ebp - 0x66], 1
mov dword [ebp - 0x65], 0x4a
lea eax, [ebp - 0x4c]
mov edx, 0x4a
call fcn.00404a08
lea eax, [ebp - 0x4c]
call fcn.004048d4
mov edx, eax
lea eax, [ebp - 0xab]
mov ecx, 0x4a
call fcn.004026b4
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
call fcn.00404684
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.004075bc
push eax
push dword [ebp - 8]
push 0x41fa28
push dword [ebp - 0xc]
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.0040473c
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0x48]
pop ecx
call fcn.00410108
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x42adc4]
call fcn.00405220
mov edx, 0x41fa8c
call fcn.00404a98
push eax
push dword [ebp - 8]
push 0x41fa28
push dword [ebp - 0xc]
lea eax, [ebp - 0xc8]
mov edx, 3
call fcn.0040473c
mov edx, dword [ebp - 0xc8]
pop eax
call fcn.00404a98
call fcn.00403164
mov eax, dword [ebp - 0x10]
call fcn.004075b4
lea eax, [ebp - 0xab]
call fcn.00419c58
test al, al
je 0x41f8cf
mov al, 1
call fcn.0040cfb4
inc dword [ebp - 0x24]
push dword [ebp - 0x60]
push 0x41faa4
lea ecx, [ebp - 0xcc]
mov edx, 3
mov eax, dword [ebp - 0x24]
call fcn.0040d874
push dword [ebp - 0xcc]
lea eax, [ebp - 4]
mov edx, 3
call fcn.0040473c
cmp byte [ebp + 0xc], 0
jne 0x41f854
mov eax, dword [ebp - 4]
call fcn.00407624
test al, al
jne 0x41f8bd
mov eax, dword [ebp - 4]
call fcn.00411250
push 0
push 0
lea eax, [ebp - 0x44]
push eax
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0x24]
call fcn.00407340
mov ecx, dword [ebp - 0xd0]
mov edx, 0x41fab0
mov eax, dword [ebp + 0x1c]
call fcn.0040dd0c
mov eax, dword [ebp + 0x14]
push eax
mov al, byte [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp - 0x44]
xor eax, eax
call fcn.0040d400
mov byte [ebp - 0x61], al
push 0
push 0x1f4
xor eax, eax
call fcn.0040ce2c
mov eax, dword [ebp - 4]
call fcn.00407624
test al, al
jne 0x41f8bd
cmp byte [ebp - 0x61], 0
jne 0x41f85c
push 0
push 1
push 0
xor ecx, ecx
xor edx, edx
mov eax, 1
call dword [ebp + 0x20]
lea eax, [ebp - 0xab]
call fcn.00419c58
test al, al
je 0x41f8e8
cmp byte [ebp - 0x61], 0
jne 0x41f26e
cmp byte [ebp - 0x61], 0
jne 0x41f8f6
mov eax, dword [ebp + 8]
call fcn.004043d8
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [ebp - 0x28]
xor edx, edx
push edx
push eax
mov eax, dword [0x42adc4]
mov edx, 0x41fac4
call fcn.00404a98
call fcn.00405220
mov edx, 0x41fae0
call fcn.00404a98
call fcn.00403164
mov eax, dword [0x42adc4]
call fcn.00403164
push 0
push 0x1f4
xor eax, eax
call fcn.0040ce2c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41f989
lea eax, [ebp - 0xd0]
mov edx, 9
call fcn.004043fc
lea eax, [ebp - 0x60]
mov edx, 8
call fcn.004043fc
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004043fc
lea eax, [ebp + 0x14]
mov edx, 3
call fcn.004043fc
ret