Function at 0x436bf0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xffffffffffffffff
push 0x4874f8
mov eax, dword fs:[0]
push eax
sub esp, 0xfc
mov eax, dword [0x4a9750]
xor eax, esp
mov dword [esp + 0xf8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a9750]
xor eax, esp
push eax
lea eax, [esp + 0x110]
mov dword fs:[0], eax
mov ebp, ecx
mov edx, dword [esp + 0x128]
mov esi, 0x80400000
mov ecx, dword [esp + 0x120]
mov eax, dword [esp + 0x124]
mov ebx, dword [esp + 0x138]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x130]
mov dword [esp + 0x24], edx
xor edx, edx
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0x2c], ecx
mov byte [esp + 0x17], 0
mov dword [esp + 0xd0], 7
mov dword [esp + 0xcc], 0
mov word [esp + 0xbc], dx
mov dword [esp + 0x118], edx
cmp dword [ebp + 4], edx
jne 0x43721a
lea edx, [esp + 0x17]
push edx
lea edx, [esp + 0xc0]
push edx
push eax
call fcn.004360a0
test al, al
je 0x43721a
cmp byte [esp + 0x17], 0
mov eax, 0x80c0f000
mov dword [esp + 0xfc], 0
cmovne esi, eax
mov dword [esp + 0x100], 0
xor eax, eax
mov dword [esp + 0x20], esi
mov dword [esp + 0x100], 7
mov dword [esp + 0xfc], 0
mov word [esp + 0xec], ax
mov byte [esp + 0x118], 1
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], eax
mov dword [esp + 0xe8], 7
mov dword [esp + 0xe4], eax
mov word [esp + 0xd4], ax
mov byte [esp + 0x118], 2
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa0], 7
mov dword [esp + 0x9c], eax
mov word [esp + 0x8c], ax
mov byte [esp + 0x118], 3
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x88], 7
mov dword [esp + 0x84], eax
mov word [esp + 0x74], ax
mov byte [esp + 0x118], 4
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x70], 7
mov dword [esp + 0x6c], eax
mov word [esp + 0x5c], ax
mov byte [esp + 0x118], 5
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0xb8], 7
mov dword [esp + 0xb4], eax
mov word [esp + 0xa4], ax
mov byte [esp + 0x118], 6
lea eax, [esp + 0xa4]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x9c]
push eax
lea edx, [esp + 0xe8]
lea ecx, [esp + 0xd0]
call fcn.00447220
add esp, 0x14
test al, al
je 0x4370c5
lea esi, [ebp + 0x20]
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push eax
push esi
call edi
mov byte [esp + 0x118], 7
cmp dword [esp + 0x6c], 0
jne 0x436e5f
xor ecx, ecx
jmp 0x436e6d
cmp dword [esp + 0x70], 8
lea ecx, [esp + 0x5c]
cmovae ecx, dword [esp + 0x5c]
cmp dword [esp + 0x84], 0
jne 0x436e7b
xor eax, eax
jmp 0x436e8c
cmp dword [esp + 0x88], 8
lea eax, [esp + 0x74]
cmovae eax, dword [esp + 0x74]
cmp dword [esp + 0xa0], 8
lea edx, [esp + 0x8c]
push ecx
push dword [esp + 0x24]
cmovae edx, dword [esp + 0x94]
push ecx
push ecx
mov ecx, dword [esp + 0x3c]
push eax
push dword [esp + 0x2c]
call fcn.00436a70
add esp, 0x18
mov dword [esp + 0x18], eax
mov byte [esp + 0x118], 6
push 0
push esi
call edi
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4370c5
mov dword [ebp + 0xc], eax
mov dword [esp + 0x104], 0x497cf0
mov dword [esp + 0x108], 0
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call edi
mov byte [esp + 0x118], 8
cmp dword [ebx + 0x10], 0
jne 0x436f11
xor ebx, ebx
jmp 0x436f19
cmp dword [ebx + 0x14], 8
jb 0x436f19
mov ebx, dword [ebx]
cmp dword [esp + 0xb8], 8
lea eax, [esp + 0xa4]
push ecx
push dword [esp + 0x24]
cmovae eax, dword [esp + 0xac]
lea ecx, [esp + 0x10c]
push ecx
push ebx
push ecx
mov ecx, dword [esp + 0x2c]
mov edx, str.POST
push eax
call fcn.00436af0
add esp, 0x18
mov ebx, eax
mov byte [esp + 0x118], 6
push 0
push esi
call edi
cmp dword [ebp + 0xc], 0
jne 0x436f7a
test ebx, ebx
je 0x4370c5
mov ecx, ebx
call fcn.00435e60
jmp 0x4370c5
test ebx, ebx
je 0x4370c5
mov eax, dword [esp + 0x24]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x12c]
mov dword [ebp + 4], ebx
mov dword [esp + 0x30], 0x28
mov dword [esp + 0x34], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call edi
mov byte [esp + 0x118], 9
sub esp, 0xc
lea eax, [esp + 0x3c]
push eax
push ebx
call fcn.00445030
mov ecx, eax
call fcn.004453b0
test eax, eax
je 0x4370b8
mov byte [esp + 0x118], 6
push 0
push esi
call edi
cmp dword [ebp + 0xc], 0
je 0x4370c5
mov dword [esp + 0x58], 0
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call edi
mov byte [esp + 0x118], 0xa
lea eax, [esp + 0x58]
push eax
push dword [esp + 0x130]
push dword [esp + 0x30]
push ebx
call fcn.00445030
mov ecx, eax
call fcn.004459e0
test eax, eax
je 0x4370b8
mov byte [esp + 0x118], 6
push 0
push esi
call edi
cmp dword [ebp + 0xc], 0
je 0x4370c5
mov eax, dword [esp + 0x12c]
cmp dword [esp + 0x58], eax
jne 0x4370c5
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call edi
mov byte [esp + 0x118], 0xb
sub esp, 8
mov ecx, ebx
call fcn.00436b70
add esp, 8
test eax, eax
je 0x4370b8
mov byte [esp + 0x118], 6
push 0
push esi
call edi
mov bl, 1
jmp 0x4370c7
mov byte [esp + 0x118], 6
push 0
push esi
call edi
xor bl, bl
mov byte [esp + 0x118], 5
cmp dword [esp + 0xb8], 8
jb 0x4370e8
push dword [esp + 0xa4]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0xb8], 7
mov dword [esp + 0xb4], 0
mov word [esp + 0xa4], ax
mov byte [esp + 0x118], 4
cmp dword [esp + 0x70], 8
jb 0x437123
push dword [esp + 0x5c]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x70], 7
mov dword [esp + 0x6c], 0
mov word [esp + 0x5c], ax
mov byte [esp + 0x118], 3
cmp dword [esp + 0x88], 8
jb 0x437158
push dword [esp + 0x74]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x88], 7
mov dword [esp + 0x84], 0
mov word [esp + 0x74], ax
mov byte [esp + 0x118], 2
cmp dword [esp + 0xa0], 8
jb 0x437196
push dword [esp + 0x8c]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0xa0], 7
mov dword [esp + 0x9c], 0
mov word [esp + 0x8c], ax
mov byte [esp + 0x118], 1
cmp dword [esp + 0xe8], 8
jb 0x4371d7
push dword [esp + 0xd4]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0xe8], 7
mov dword [esp + 0xe4], 0
mov word [esp + 0xd4], ax
mov byte [esp + 0x118], al
mov dword [esp + 0x100], 7
mov dword [esp + 0xfc], eax
mov word [esp + 0xec], ax
jmp 0x43721c
xor bl, bl
mov dword [esp + 0x118], 0xffffffff
cmp dword [esp + 0xd0], 8
jb 0x437240
push dword [esp + 0xbc]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0xd0], 7
mov word [esp + 0xbc], ax
mov al, bl
mov dword [esp + 0xcc], 0
mov ecx, dword [esp + 0x110]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xf8]
xor ecx, esp
call fcn.00466b29
add esp, 0x108
ret 0x20