Function at 0x481410
Capabilities:
Check for time delay via gettickcount
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x468
cmp dword [esp + 0x474], 0
push ebx
push ebp
push esi
push edi
ja 0x48142f
mov dword [esp + 0x484], 0x6400000
mov eax, dword [esp + 0x48c]
test eax, eax
je 0x481440
mov dword [eax], 1
push str.__.09
call fcn.004a4b10
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
mov dword [esp + 0x2c], edi
test edi, edi
je 0x48158a
mov eax, dword [esp + 0x47c]
test eax, eax
je 0x48158a
cmp word [eax], 0
je 0x48158a
push 0x4f58dc
call fcn.004a4bf0
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 4
push eax
push edi
call esi
mov ebp, eax
push 0x4f58f4
mov dword [esp + 0x20], ebp
call fcn.004a4bf0
add esp, 4
push eax
push edi
call esi
mov ebx, eax
push 0x4f5910
mov dword [esp + 0x1c], ebx
call fcn.004a4bf0
add esp, 4
push eax
push edi
call esi
push 0x4f592c
mov dword [esp + 0x28], eax
call fcn.004a4bf0
add esp, 4
push eax
push edi
call esi
push 0x4f5948
mov dword [esp + 0x18], eax
call fcn.004a4bf0
add esp, 4
push eax
push edi
call esi
mov dword [esp + 0x28], eax
test ebp, ebp
je 0x481583
test ebx, ebx
je 0x481583
cmp dword [esp + 0x24], 0
je 0x481583
cmp dword [esp + 0x14], 0
je 0x481583
test eax, eax
je 0x481583
mov eax, dword [esp + 0x47c]
mov esi, 0x84000000
call fcn.00409d80
mov ebp, eax
cmp word [ebp], 0x2a
jne 0x48154d
add ebp, 2
mov esi, ebp
call fcn.0041ac40
mov esi, eax
mov ebx, 0x4ebd9c
mov eax, ebp
call fcn.00409d30
test eax, eax
je 0x48154d
call fcn.00409d80
mov ebp, eax
mov eax, dword [0x51e5e0]
push 0
push 0
push 0
push 4
push eax
call dword [esp + 0x30]
mov ebx, eax
mov dword [esp + 0x58], ebx
test ebx, ebx
je 0x481583
push 0
push esi
push 0
push 0
push ebp
push ebx
call dword [esp + 0x30]
mov dword [esp + 0x18], eax
test eax, eax
jne 0x481597
push ebx
call dword [esp + 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x468
ret
mov esi, dword [esp + 0x480]
xor eax, eax
lea ecx, [esp + 0x78]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov edi, 0x100000
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x30], 0x28
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], 0x400
xor ebx, ebx
call fcn.00414050
mov edx, esi
mov edi, dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x1c], eax
movzx eax, word [ebp]
cmp eax, 0x68
je 0x48172a
cmp eax, 0x48
je 0x48172a
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
push 0x400
lea ecx, [esp + 0x80]
push ecx
push edx
call dword [esp + 0x38]
test eax, eax
je 0x48185e
mov esi, 0x100000
cmp dword [esp + 0x14], 0
je 0x48185e
mov ebp, dword [esp + 0x488]
test ebp, ebp
je 0x48165d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1c]
cmp eax, ebp
ja 0x481839
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebp
sub eax, dword [0x51cbec]
mov ecx, dword [0x5165ec]
cmp eax, dword [ecx + 0xd8]
jbe 0x4816a3
push 0
push 0
push 0
push 0
lea edx, [esp + 0x6c]
push edx
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x48169c
push 1
push 0xffffffffffffffff
call fcn.00401930
add esp, 8
call ebp
mov dword [0x51cbec], eax
mov ecx, dword [esp + 0x484]
mov eax, dword [esp + 0x48]
lea eax, [ebx + eax + 3]
test ecx, ecx
je 0x4816be
cmp ecx, eax
jbe 0x48184e
cmp esi, eax
ja 0x4816e8
add esi, 0x100000
mov eax, esi
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x480]
call fcn.004141b0
mov edi, eax
test edi, edi
je 0x481855
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x7c]
push edx
lea eax, [edi + ebx]
push eax
call fcn.004d23c0
mov eax, dword [esp + 0x24]
add ebx, dword [esp + 0x20]
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
push 0x400
lea edx, [esp + 0x80]
push edx
push eax
call dword [esp + 0x38]
test eax, eax
jne 0x481635
jmp 0x48185e
mov edx, dword [esp + 0x18]
push 0
push 8
lea ecx, [esp + 0x38]
push ecx
push edx
call dword [esp + 0x24]
test eax, eax
je 0x48185e
mov esi, 0x100000
lea esp, [esp]
cmp dword [esp + 0x48], 0
je 0x48185e
mov ebp, dword [esp + 0x488]
test ebp, ebp
je 0x481778
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1c]
cmp eax, ebp
ja 0x481839
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebp
sub eax, dword [0x51cbec]
mov ecx, dword [0x5165ec]
cmp eax, dword [ecx + 0xd8]
jbe 0x4817be
push 0
push 0
push 0
push 0
lea edx, [esp + 0x6c]
push edx
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x4817b7
push 1
push 0xffffffffffffffff
call fcn.00401930
add esp, 8
call ebp
mov dword [0x51cbec], eax
mov ecx, dword [esp + 0x484]
mov eax, dword [esp + 0x48]
lea eax, [ebx + eax + 3]
test ecx, ecx
je 0x4817d5
cmp ecx, eax
jbe 0x48184e
cmp esi, eax
ja 0x4817fb
add esi, 0x100000
mov eax, esi
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x480]
call fcn.004141b0
mov edi, eax
test edi, edi
je 0x481855
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x48]
push ecx
lea edx, [esp + 0x7c]
push edx
lea eax, [edi + ebx]
push eax
call fcn.004d23c0
mov edx, dword [esp + 0x24]
add ebx, dword [esp + 0x54]
add esp, 0xc
push 0
push 8
lea ecx, [esp + 0x38]
push ecx
push edx
mov dword [esp + 0x58], 0x400
call dword [esp + 0x24]
test eax, eax
jne 0x481750
jmp 0x48185e
mov eax, dword [esp + 0x48c]
test eax, eax
je 0x48184a
mov dword [eax], 2
xor ebx, ebx
jmp 0x48185e
mov esi, dword [esp + 0x480]
push 1
xor ebx, ebx
call fcn.00413fe0
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x24]
push eax
mov word [edi + ebx], 0
mov byte [edi + ebx + 2], 0
call esi
mov ecx, dword [esp + 0x58]
push ecx
call esi
mov edx, dword [esp + 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [esp + 0x48c]
test eax, eax
je 0x48189c
cmp dword [eax], 2
jae 0x48189c
mov dword [eax], 0
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
add esp, 0x468
ret