Function at 0x426829
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3b4
mov eax, dword [0x4434f4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x100
xor esi, esi
lea eax, [ebp - 0x108]
push esi
push eax
mov edi, ecx
call sub.msvcrt.dll_memset
mov eax, dword fs:[0x2c]
add esp, 0xc
mov ebx, esi
mov ecx, dword [eax]
mov eax, dword [0x445618]
cmp eax, dword [ecx + 4]
jle 0x4268a6
push 0x445618
call fcn.004422a8
cmp dword [0x445618], 0xffffffff
pop ecx
jne 0x4268a6
mov eax, dword [edi + 0x84]
test eax, eax
je 0x426894
mov eax, dword [eax + 0x54]
jmp 0x426896
mov eax, esi
push 0x445618
mov dword [0x445630], eax
call fcn.00442267
pop ecx
mov eax, dword [edi + 0x80]
lea edx, [ebp - 0x3a0]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x1c]
mov ecx, esi
call dword [0x446624]
call esi
cmp dword [ebp - 0x39c], ebx
jl 0x4268de
mov eax, dword [0x445630]
test eax, eax
je 0x4268fa
xor ecx, ecx
cmp dword [eax + 0x250], ecx
je 0x4268fa
xor ebx, ebx
mov dword [edi + 0x34], ebx
cmp dword [edi + 0x30], ebx
je 0x4268f4
push dword [edi + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x30], ebx
mov ebx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x3a0]
xor ecx, ecx
push 2
pop edx
sub eax, ecx
je 0x4269d9
sub eax, 1
je 0x4269cf
sub eax, 1
je 0x426996
sub eax, 1
je 0x426948
sub eax, 1
je 0x42693e
sub eax, 1
je 0x426934
mov esi, 0x2779
jmp 0x4269f1
mov esi, 0x2778
jmp 0x4269d4
mov esi, 0x2777
jmp 0x4269f1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x64]
cmp eax, 0x1d4c0
jbe 0x42698f
xor ebx, ebx
mov esi, 0x277a
mov dword [edi + 0x34], ebx
cmp dword [edi + 0x30], ebx
je 0x426973
push dword [edi + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x30], ebx
mov edx, 0x405f20
push 2
pop eax
mov ebx, 0x80072efd
mov ecx, eax
mov dword [ebp - 0x39c], ebx
call fcn.0041e9cb
jmp 0x4269ee
mov esi, 0x2775
jmp 0x4269ee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x64]
cmp eax, 0x1d4c0
jbe 0x4269c8
xor ebx, ebx
mov esi, 0x277a
mov dword [edi + 0x34], ebx
cmp dword [edi + 0x30], ebx
je 0x4269c1
push dword [edi + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x30], ebx
mov edx, 0x405ef8
jmp 0x426978
mov esi, 0x2776
jmp 0x4269ee
mov esi, 0x277a
mov dword [edi + 0x34], ecx
jmp 0x4269f1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x64]
cmp eax, 0x1d4c0
ja 0x4269a6
mov esi, 0x2774
push 2
pop edx
cmp dword [ebp - 0x39c], 0
je 0x426a27
mov eax, dword [edi + 4]
test eax, eax
jne 0x426a06
mov eax, 0x4045c8
push dword [ebp - 0x39c]
push eax
push 0x405f50
push edx
call fcn.0041ea5f
add esp, 0x10
push dword [ebp - 0x39c]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [ebp - 0x398]
cmp eax, 0xffffffff
jne 0x426a6c
mov edi, 0x80
lea eax, [ebp - 0x108]
push edi
push eax
push 0x26e8
push dword [0x443af0]
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x426ae8
push 0x407244
mov edx, edi
lea ecx, [ebp - 0x108]
call fcn.0040c010
jmp 0x426ae8
sub eax, dword [ebp - 0x394]
xor edx, edx
push 0x3c
cmp dword [ebp - 0x390], edx
jbe 0x426a86
div dword [ebp - 0x390]
jmp 0x426a8d
mov ecx, 0x3e80
div ecx
pop ecx
xor edx, edx
mov dword [ebp - 0x3a4], eax
div ecx
mov edi, edx
xor edx, edx
div ecx
mov eax, dword [ebp - 0x3a4]
mov ecx, 0xe10
push edi
push edx
cmp eax, ecx
jb 0x426acf
xor edx, edx
div ecx
push eax
push 0x4056f8
lea eax, [ebp - 0x108]
push 0x100
push eax
call fcn.0040c0f9
add esp, 0x18
jmp 0x426ae8
push 0x40571c
lea eax, [ebp - 0x108]
push 0x100
push eax
call fcn.0040c0f9
add esp, 0x14
push 0x100
lea eax, [ebp - 0x388]
push eax
push esi
push dword [0x443af0]
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
je 0x426bf3
lea ecx, [ebp - 0x388]
xor edi, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, di
jne 0x426b14
sub ecx, edx
lea edx, [ebp - 0x108]
sar ecx, 1
lea esi, [edx + 2]
mov ax, word [edx]
add edx, 2
cmp ax, di
jne 0x426b2c
sub edx, esi
lea eax, [ecx + 0x21]
sar edx, 1
xor ecx, ecx
add eax, edx
push 2
pop edx
mov dword [ebp - 0x3a8], eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0044183a
mov edi, eax
pop ecx
test edi, edi
je 0x426bf3
mov esi, dword [ebp - 0x394]
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 0x3a4], 0x80004005
call fcn.0043fdcb
xor ecx, ecx
push ecx
push esi
lea ecx, [ebp - 0x3b4]
call fcn.00422c53
test eax, eax
js 0x426bad
push 0x40
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x3b4]
call fcn.0044031e
mov dword [ebp - 0x3a4], eax
lea ecx, [ebp - 0x3b4]
call fcn.00440156
cmp dword [ebp - 0x3a4], 0
jl 0x426bec
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x388]
push eax
push dword [ebp - 0x3a8]
push edi
call fcn.0040c0b5
add esp, 0x14
mov ecx, edi
call fcn.0041dfcd
push edi
call fcn.00441807
pop ecx
mov ecx, dword [ebp - 0x398]
test ecx, ecx
jne 0x426bfe
inc ecx
imul eax, dword [ebp - 0x394], 0x64
xor edx, edx
div ecx
mov ecx, eax
call fcn.0041dfa0
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00441b90
mov esp, ebp
pop ebp
ret