Function at 0x425ac0
Capabilities:
Check for time delay via gettickcount

Disassembly:
sub esp, 0x10
mov eax, dword [edi + 0x1b4]
push ebx
cdq
push ebp
xor eax, edx
push esi
sub eax, edx
imul eax, dword [edi + 0x1d4]
push 0
push 0
push 0x258
push 0x320
push 0
mov dword [esp + 0x2c], eax
lea eax, [edi + 0x188]
lea ecx, [edi + 0x308]
push 0
call fcn.00408dc0
lea eax, [edi + 0x42c]
mov dword [esp + 0x10], 0x15
mov esi, 0x4a4dbc
mov dword [esp + 0x14], eax
mov ecx, dword [edi + 0x3d0]
mov eax, dword [edi + 0x3cc]
dec ecx
cmp ecx, eax
jg 0x425b41
mov edx, dword [esp + 0x10]
lea ecx, [edx + eax*8]
lea edx, [eax + ecx - 0x15]
mov eax, dword [edi + 0x458]
dec eax
cmp edx, eax
jg 0x425c3d
mov ecx, dword [esp + 0x14]
cmp dword [ecx], 1
mov ebx, dword [esi]
mov edx, dword [esi - 0xc]
mov ecx, dword [esi - 4]
jne 0x425bca
mov ebp, dword [esi - 8]
test ecx, ecx
jl 0x425c25
mov eax, dword [edi + 0x330]
sub eax, edx
cmp ecx, eax
jle 0x425b6b
mov ecx, eax
test ecx, ecx
je 0x425c25
test ebx, ebx
jl 0x425c25
mov eax, dword [edi + 0x334]
cdq
xor eax, edx
sub eax, edx
sub eax, ebp
cmp ebx, eax
jle 0x425b8e
mov ebx, eax
test ebx, ebx
je 0x425c25
mov eax, dword [edi + 0x460]
push eax
mov eax, dword [esi + 8]
push 0x80
push 0
push 0
push eax
mov eax, dword [esi - 0xc]
push ebx
push ecx
push ebp
push eax
lea eax, [edi + 0x308]
push eax
mov eax, dword [esi + 4]
lea edx, [edi + 0x248]
xor bl, bl
call fcn.00418350
jmp 0x425c25
test ecx, ecx
jl 0x425c25
mov eax, dword [edi + 0x330]
lea ebp, [edi + 0x308]
sub eax, edx
cmp ecx, eax
jle 0x425be2
mov ecx, eax
test ecx, ecx
je 0x425c25
test ebx, ebx
jl 0x425c25
mov eax, dword [ebp + 0x2c]
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esi - 8]
sub eax, edx
cmp ebx, eax
jle 0x425bfd
mov ebx, eax
test ebx, ebx
je 0x425c25
push 0x80
push 0
push 0
push 0
push 0
push 0
lea eax, [edi + 0x2a8]
push eax
mov eax, dword [esi - 0xc]
push ebx
push ecx
push edx
push eax
mov eax, ebp
call fcn.00418510
inc dword [esp + 0x10]
add dword [esp + 0x14], 4
add esi, 0x38
cmp esi, 0x4a4fb4
jl 0x425b16
mov eax, dword [edi + 0x3d0]
cmp eax, 1
jle 0x425cee
mov ebp, 0xa
add eax, ebp
cmp eax, ebp
jle 0x425cee
mov esi, 0x4a4b58
mov edx, dword [esi + 4]
mov eax, dword [esi]
mov ecx, dword [esi - 4]
push edx
mov edx, dword [esi - 8]
push eax
lea eax, [edi + 0x1e8]
push eax
mov eax, dword [esi - 0xc]
push ecx
push edx
push eax
mov eax, dword [esi - 0x10]
lea ebx, [edi + 0x308]
mov ecx, ebx
call fcn.0040a1b0
lea ecx, [ebp - 0xa]
cmp dword [edi + 0x3cc], ecx
jne 0x425cd9
mov eax, dword [esi - 0xc]
mov ecx, dword [esi - 0x10]
mov edx, dword [esi - 4]
push eax
push ecx
push edx
mov edx, dword [esi - 8]
push edx
push eax
push ecx
lea eax, [edi + 0x188]
mov ecx, ebx
call fcn.00408dc0
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi - 4]
push eax
push ecx
mov ecx, dword [esi - 0xc]
lea eax, [edi + 0x1e8]
push eax
mov eax, dword [esi - 8]
push edx
push eax
mov eax, dword [esi - 0x10]
push ecx
mov ecx, ebx
call fcn.0040a1b0
mov edx, dword [edi + 0x3d0]
inc ebp
add edx, 0xa
add esi, 0x38
cmp ebp, edx
jl 0x425c60
mov eax, dword [edi + 0x3e4]
cmp eax, 1
jle 0x425d96
xor ebp, ebp
test eax, eax
jle 0x425d96
mov esi, 0x4a4928
lea esp, [esp]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov edx, dword [esi - 4]
push eax
push ecx
mov ecx, dword [esi - 0xc]
lea eax, [edi + 0x1e8]
push eax
mov eax, dword [esi - 8]
push edx
push eax
mov eax, dword [esi - 0x10]
push ecx
lea ebx, [edi + 0x308]
mov ecx, ebx
call fcn.0040a1b0
cmp dword [edi + 0x3e0], ebp
jne 0x425d86
mov eax, dword [esi - 0xc]
mov ecx, dword [esi - 0x10]
mov edx, dword [esi - 4]
push eax
push ecx
push edx
mov edx, dword [esi - 8]
push edx
push eax
push ecx
lea eax, [edi + 0x188]
mov ecx, ebx
call fcn.00408dc0
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi - 4]
push eax
push ecx
mov ecx, dword [esi - 0xc]
lea eax, [edi + 0x1e8]
push eax
mov eax, dword [esi - 8]
push edx
push eax
mov eax, dword [esi - 0x10]
push ecx
mov ecx, ebx
call fcn.0040a1b0
inc ebp
add esi, 0x38
cmp ebp, dword [edi + 0x3e4]
jl 0x425d10
mov edx, dword [0x4a4d8c]
mov eax, dword [0x4a4d88]
push edx
mov edx, dword [0x4a4d84]
push eax
mov eax, dword [0x4a4d80]
lea ecx, [edi + 0x1e8]
push ecx
mov ecx, dword [0x4a4d7c]
push edx
push eax
mov eax, dword [0x4a4d78]
push ecx
lea ecx, [edi + 0x308]
call fcn.0040a1b0
cmp dword [0x4b3d98], 0
jne 0x425ebe
mov dword [esp + 0x14], 0x2000
mov ebx, edi
call fcn.00428cb0
test eax, eax
je 0x425efb
cmp dword [0x4b5a90], 1
jne 0x425e03
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x425e09
call dword [sym.imp.WINMM.dll_timeGetTime]
mov esi, dword [esp + 0x18]
mov ecx, dword [edi + 0x318]
mov ebp, eax
mov eax, dword [edi + 0x78]
test esi, esi
jle 0x425e36
lea esp, [esp]
movzx edx, byte [ecx]
add edx, dword [edi + 0x60]
mov ebx, dword [esp + 0x14]
mov dl, byte [edx + ebx]
mov byte [eax], dl
inc eax
inc ecx
sub esi, 1
jne 0x425e20
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
push 0
push 0
push 0
push 0x258
push 0x320
push 0
push 0
mov ecx, edi
call edx
lea esi, [ebp + 0xf]
cmp dword [0x4b5a90], 1
jne 0x425e67
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x425e6d
call dword [sym.imp.WINMM.dll_timeGetTime]
cmp esi, eax
jbe 0x425e83
mov ebx, edi
call fcn.00428cb0
test eax, eax
jne 0x425e56
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov ecx, dword [edi + 0x24]
push 0
mov eax, 1
call fcn.004037d0
mov ecx, dword [edi + 0x24]
push 0
mov eax, 0x80
call fcn.004037d0
cmp eax, 1
je 0x425ebe
mov eax, dword [esp + 0x14]
add eax, 0x2000
cmp eax, 0x10000
mov dword [esp + 0x14], eax
jl 0x425de3
push 0
push 0
push 0x258
push 0x320
push 0
push 0
lea ecx, [edi + 0x68]
lea eax, [edi + 0x308]
call fcn.00408dc0
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
push 0
push 0
push 0
push 0x258
push 0x320
push 0
push 0
mov ecx, edi
call edx
pop esi
pop ebp
pop ebx
add esp, 0x10
ret