Function at 0x413530
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x425336
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x42d414]
xor eax, esp
mov dword [esp + 0x38], eax
push ebx
push esi
push edi
mov eax, dword [0x42d414]
xor eax, esp
push eax
lea eax, [esp + 0x50]
mov dword fs:[0], eax
push 0x42e4c8
mov ebx, ecx
mov dword [esp + 0x20], vtable.nfapi::AutoLock.0
mov dword [esp + 0x24], 0x42e4c8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x42e3b4], 0
mov dword [esp + 0x58], 0
je case.0x4135ab.6
mov eax, dword [ebx]
cmp eax, 0x1d
ja case.0x4135ab.6
movzx eax, byte [eax + 0x413e10]
jmp dword [eax*4 + 0x413dc4]
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
mov eax, dword [0x42e3a4]
push ecx
push edx
push eax
call fcn.00419960
add esp, 0xc
test eax, eax
je 0x4135e1
add eax, 0xfffffff8
lea esi, [ebx + 0x10]
lea edi, [eax + 0x5c]
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp 0x4135fd
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 4]
lea ecx, [ebx + 0x10]
push ecx
push edx
push eax
call fcn.00410450
add esp, 0xc
test eax, eax
je case.0x4135ab.6
mov byte [eax + 0xa5], 1
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
push 0x1c
add eax, 0x67
push eax
push ecx
push edx
call fcn.004119d0
add esp, 0x10
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
mov byte [esp + 0x58], 1
push ebx
mov ecx, 0x42e4f8
call fcn.004172e0
mov eax, dword [esp + 0x18]
push eax
jmp 0x413d94
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 4]
lea ecx, [ebx + 0x10]
push ecx
push edx
push eax
call fcn.00410450
add esp, 0xc
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
push ebx
mov ecx, 0x42e4f8
mov byte [esp + 0x5c], 2
call fcn.004172e0
jmp 0x413d8f
cmp dword [ebx + 0xc], 0x10
jne 0x4136b4
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 4]
mov ecx, dword [0x42e3a4]
push edx
push eax
push ecx
call fcn.00419960
add esp, 0xc
test eax, eax
je 0x4136b4
mov edx, dword [ebx + 0x10]
add eax, 0x3e
mov dword [eax], edx
mov ecx, dword [ebx + 0x14]
mov dword [eax + 4], ecx
mov edx, dword [ebx + 0x18]
mov dword [eax + 8], edx
mov ecx, dword [ebx + 0x1c]
mov dword [eax + 0xc], ecx
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
mov byte [esp + 0x58], 3
push ebx
mov ecx, 0x42e4f8
call fcn.004172e0
mov edx, dword [esp + 0x18]
push edx
jmp 0x413d94
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
mov edx, dword [0x42e3a4]
push eax
push ecx
push edx
call fcn.00419960
add esp, 0xc
test eax, eax
je 0x4137e9
lea edi, [eax - 8]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi + 0x58], eax
mov eax, dword [ebx + 0xc]
test eax, eax
lea ecx, [edi + 0x14]
jbe 0x413746
cmp dword [ecx], ecx
je 0x413746
mov esi, dword [ecx + 4]
mov ecx, dword [esi + 0x14]
lea edx, [ecx + eax]
cmp edx, 0x20000
ja 0x413746
push eax
lea eax, [ebx + 0x10]
push eax
lea ecx, [ecx + esi + 0x18]
push ecx
call fcn.0041adc0
mov edx, dword [ebx + 0xc]
add dword [esi + 0x14], edx
mov eax, dword [ebx + 0xc]
add esp, 0xc
add dword [edi + 0x1c], eax
jmp 0x4137a6
push 0
push 0x2001b
call fcn.00419a50
mov esi, eax
add esp, 8
test esi, esi
je case.0x4135ab.6
mov ecx, dword [ebx + 4]
mov dword [esi + 0xc], ecx
mov edx, dword [ebx + 8]
mov dword [esi + 0x10], edx
mov eax, dword [ebx]
mov dword [esi + 8], eax
mov ecx, dword [ebx + 0xc]
mov dword [esi + 0x14], ecx
cmp dword [ebx + 0xc], 0
jbe 0x413790
mov edx, dword [ebx + 0xc]
push edx
lea eax, [ebx + 0x10]
push eax
lea ecx, [esi + 0x18]
push ecx
call fcn.0041adc0
add esp, 0xc
mov edx, dword [ebx + 0xc]
add dword [edi + 0x1c], edx
mov ecx, dword [edi + 0x18]
lea eax, [edi + 0x14]
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [ecx], esi
mov dword [eax + 4], esi
mov eax, 0x100000
cmp dword [edi + 0x40], eax
jae 0x4137c7
cmp dword [edi + 0x34], eax
jae 0x4137c7
cmp dword [edi + 0x28], 0x40000
jae 0x4137c7
cmp dword [edi + 0x1c], 0x800000
jb 0x4137d1
push 1
call fcn.004109f0
add esp, 4
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
mov byte [esp + 0x58], 4
jmp 0x41362d
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 8]
push ecx
mov ecx, dword [ebx + 4]
lea edx, [ebx + 0x10]
push edx
push eax
push ecx
call fcn.00413050
add esp, 0x10
jmp case.0x4135ab.6
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 4]
mov ecx, dword [0x42e3a4]
push edx
push eax
push ecx
call fcn.00419960
add esp, 0xc
test eax, eax
je 0x413913
lea edi, [eax - 8]
lea esi, [edi + 0x20]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi + 0x58], eax
mov eax, dword [ebx + 0xc]
test eax, eax
jbe 0x413870
cmp dword [esi], esi
je 0x413870
mov esi, dword [esi + 4]
mov ecx, dword [esi + 0x14]
lea edx, [ecx + eax]
cmp edx, 0x20000
ja 0x413870
push eax
lea eax, [ebx + 0x10]
push eax
lea ecx, [ecx + esi + 0x18]
push ecx
call fcn.0041adc0
mov edx, dword [ebx + 0xc]
add dword [esi + 0x14], edx
mov eax, dword [ebx + 0xc]
add esp, 0xc
add dword [edi + 0x28], eax
jmp 0x4138d0
push 0
push 0x2001b
call fcn.00419a50
mov esi, eax
add esp, 8
test esi, esi
je case.0x4135ab.6
mov ecx, dword [ebx + 4]
mov dword [esi + 0xc], ecx
mov edx, dword [ebx + 8]
mov dword [esi + 0x10], edx
mov eax, dword [ebx]
mov dword [esi + 8], eax
mov ecx, dword [ebx + 0xc]
mov dword [esi + 0x14], ecx
cmp dword [ebx + 0xc], 0
jbe 0x4138ba
mov edx, dword [ebx + 0xc]
push edx
lea eax, [ebx + 0x10]
push eax
lea ecx, [esi + 0x18]
push ecx
call fcn.0041adc0
add esp, 0xc
mov edx, dword [ebx + 0xc]
add dword [edi + 0x28], edx
mov ecx, dword [edi + 0x24]
lea eax, [edi + 0x20]
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [ecx], esi
mov dword [eax + 4], esi
mov eax, 0x100000
cmp dword [edi + 0x40], eax
jae 0x4138f1
cmp dword [edi + 0x34], eax
jae 0x4138f1
cmp dword [edi + 0x28], 0x40000
jae 0x4138f1
cmp dword [edi + 0x1c], 0x800000
jb 0x4138fb
push 1
call fcn.004109f0
add esp, 4
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
mov byte [esp + 0x58], 5
jmp 0x41362d
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 8]
push ecx
mov ecx, dword [ebx + 4]
lea edx, [ebx + 0x10]
push edx
push eax
push ecx
call fcn.00413030
add esp, 0x10
jmp case.0x4135ab.6
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
push ebx
mov ecx, 0x42e578
mov byte [esp + 0x5c], 6
call fcn.004172e0
mov edx, dword [esp + 0x18]
push edx
jmp 0x413d94
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
push ebx
mov ecx, 0x42e578
mov byte [esp + 0x5c], 7
call fcn.004172e0
mov eax, dword [esp + 0x18]
push eax
jmp 0x413d94
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
push 0x19
push ecx
push edx
mov byte [esp + 0x64], 8
call fcn.00412d20
mov eax, dword [esp + 0x24]
add esp, 0xc
push eax
jmp 0x413d94
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
mov eax, dword [0x42e3a4]
push ecx
push edx
push eax
call fcn.00419960
add esp, 0xc
test eax, eax
je case.0x4135ab.6
mov byte [eax + 0x9f], 1
jmp case.0x4135ab.6
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 4]
lea ecx, [ebx + 0x10]
push ecx
push edx
push eax
call fcn.004105c0
add esp, 0xc
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
push ebx
mov ecx, 0x42e4f8
mov byte [esp + 0x5c], 9
call fcn.004172e0
jmp 0x413d8f
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 4]
mov ecx, dword [0x42e3b0]
push edx
push eax
push ecx
call fcn.00419960
add esp, 0xc
test eax, eax
je 0x413a3a
lea esi, [ebx + 0x10]
lea edi, [eax + 0x6e]
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
mov byte [esp + 0x58], 0xa
jmp 0x4136c7
cmp dword [ebx + 0xc], 0x10
jne 0x413a8d
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
mov edx, dword [0x42e3b0]
push eax
push ecx
push edx
call fcn.00419960
add esp, 0xc
test eax, eax
je 0x413a8d
mov ecx, dword [ebx + 0x10]
add eax, 0x3c
mov dword [eax], ecx
mov edx, dword [ebx + 0x14]
mov dword [eax + 4], edx
mov ecx, dword [ebx + 0x18]
mov dword [eax + 8], ecx
mov edx, dword [ebx + 0x1c]
mov dword [eax + 0xc], edx
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
mov byte [esp + 0x58], 0xb
jmp 0x41362d
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
mov eax, dword [0x42e3b0]
push ecx
push edx
push eax
call fcn.00419960
add esp, 0xc
test eax, eax
jne 0x413b0d
mov cx, word [ebx + 0x10]
mov dword [esp + 0x28], eax
lea edx, [esp + 0x24]
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov word [esp + 0x44], ax
mov eax, dword [ebx + 8]
push edx
mov word [esp + 0x2c], cx
mov ecx, dword [ebx + 4]
push eax
push ecx
call fcn.004105c0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x413b10
jmp case.0x4135ab.6
lea esi, [eax - 8]
push 0
push 0x2001b
call fcn.00419a50
mov edi, eax
add esp, 8
test edi, edi
je case.0x4135ab.6
mov edx, dword [ebx + 4]
mov dword [edi + 0xc], edx
mov eax, dword [ebx + 8]
mov dword [edi + 0x10], eax
mov ecx, dword [ebx]
mov dword [edi + 8], ecx
mov edx, dword [ebx + 0xc]
mov dword [edi + 0x14], edx
cmp dword [ebx + 0xc], 0
jbe 0x413b5a
mov eax, dword [ebx + 0xc]
push eax
lea eax, [ebx + 0x10]
push eax
lea ecx, [edi + 0x18]
push ecx
call fcn.0041adc0
add esp, 0xc
mov edx, dword [ebx + 0xc]
add dword [esi + 0x1c], edx
mov ecx, dword [esi + 0x18]
lea eax, [esi + 0x14]
mov dword [edi], eax
mov dword [edi + 4], ecx
mov dword [ecx], edi
mov dword [eax + 4], edi
mov eax, 0x100000
cmp dword [esi + 0x40], eax
jae 0x413b8e
cmp dword [esi + 0x34], eax
jae 0x413b8e
mov eax, 0x800000
cmp dword [esi + 0x28], eax
jae 0x413b8e
cmp dword [esi + 0x1c], eax
jb 0x413b9a
push 1
mov edi, esi
call fcn.00410c00
add esp, 4
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
mov byte [esp + 0x58], 0xc
jmp 0x41362d
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
mov eax, dword [0x42e3b0]
push ecx
push edx
push eax
call fcn.00419960
add esp, 0xc
test eax, eax
jne 0x413c1a
mov cx, word [ebx + 0x10]
mov dword [esp + 0x28], eax
lea edx, [esp + 0x24]
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov word [esp + 0x44], ax
mov eax, dword [ebx + 8]
push edx
mov word [esp + 0x2c], cx
mov ecx, dword [ebx + 4]
push eax
push ecx
call fcn.004105c0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x413c1d
jmp case.0x4135ab.6
lea esi, [eax - 8]
push 0
push 0x2001b
call fcn.00419a50
mov edi, eax
add esp, 8
test edi, edi
je case.0x4135ab.6
mov edx, dword [ebx + 4]
mov dword [edi + 0xc], edx
mov eax, dword [ebx + 8]
mov dword [edi + 0x10], eax
mov ecx, dword [ebx]
mov dword [edi + 8], ecx
mov edx, dword [ebx + 0xc]
mov dword [edi + 0x14], edx
cmp dword [ebx + 0xc], 0
jbe 0x413c67
mov eax, dword [ebx + 0xc]
push eax
lea eax, [ebx + 0x10]
push eax
lea ecx, [edi + 0x18]
push ecx
call fcn.0041adc0
add esp, 0xc
mov edx, dword [ebx + 0xc]
add dword [esi + 0x28], edx
mov ecx, dword [esi + 0x24]
lea eax, [esi + 0x20]
mov dword [edi], eax
mov dword [edi + 4], ecx
mov dword [ecx], edi
mov dword [eax + 4], edi
mov eax, 0x100000
cmp dword [esi + 0x40], eax
jae 0x413c9b
cmp dword [esi + 0x34], eax
jae 0x413c9b
mov eax, 0x800000
cmp dword [esi + 0x28], eax
jae 0x413c9b
cmp dword [esi + 0x1c], eax
jb 0x413ca7
push 1
mov edi, esi
call fcn.00410c00
add esp, 4
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
mov byte [esp + 0x58], 0xd
jmp 0x41362d
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
push ebx
mov ecx, 0x42e578
mov byte [esp + 0x5c], 0xe
call fcn.004172e0
jmp 0x413d8f
push 0x42e4c8
lea ecx, [esp + 0x18]
call fcn.004102d0
push ebx
mov ecx, 0x42e578
mov byte [esp + 0x5c], 0xf
call fcn.004172e0
mov edx, dword [esp + 0x18]
push edx
jmp 0x413d94
lea esi, [ebx + 0x10]
lea edi, [ebx + 0x26]
mov ebx, dword [ebx + 0xc]
push 0x42e4c8
lea ecx, [esp + 0x18]
sub ebx, 0x16
call fcn.004102d0
mov ecx, dword [0x42e4c0]
test ecx, ecx
push esi
push ebx
mov byte [esp + 0x60], 0x10
push edi
je 0x413d43
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
mov eax, dword [esp + 0x18]
push eax
jmp 0x413d94
call fcn.00411060
mov eax, dword [esp + 0x24]
add esp, 0xc
push eax
jmp 0x413d94
lea esi, [ebx + 0x10]
lea edi, [ebx + 0x26]
mov ebx, dword [ebx + 0xc]
push 0x42e4c8
lea ecx, [esp + 0x18]
sub ebx, 0x16
call fcn.004102d0
mov ecx, dword [0x42e4c0]
test ecx, ecx
push esi
push ebx
mov byte [esp + 0x60], 0x11
push edi
je 0x413d87
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
jmp 0x413d8f
call fcn.00411040
add esp, 0xc
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x42e4c8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.00419af5
mov esp, ebp
pop ebp
ret