Function at 0x431088
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3b4
mov eax, dword [0x4424f4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x100
xor ebx, ebx
lea eax, [ebp - 0x108]
push ebx
push eax
mov edi, ecx
call sub.msvcrt.dll_memset
mov eax, dword [edi + 0x2c]
lea edx, [ebp - 0x3a0]
add esp, 0xc
mov ecx, dword [eax]
push edx
push eax
mov esi, dword [ecx + 0x1c]
mov ecx, esi
call dword [0x445628]
call esi
xor ecx, ecx
cmp dword [ebp - 0x39c], ebx
jl 0x4310e2
cmp dword [edi + 0x34], ecx
je 0x4310fe
mov dword [edi + 0x30], ecx
cmp dword [edi + 0x28], ebx
je 0x4310f8
push dword [edi + 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
mov dword [edi + 0x28], ecx
mov ebx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x3a0]
push 2
pop edx
sub eax, ecx
je 0x431200
sub eax, 1
je 0x4311f1
sub eax, 1
je 0x4311b3
sub eax, 1
je 0x431165
sub eax, 1
je 0x431156
sub eax, 1
je 0x43113a
mov esi, 0x2779
jmp 0x431225
push 4
mov edx, 0x408168
mov esi, 0x2778
pop ecx
call fcn.0041e7a8
xor eax, eax
mov dword [edi + 0x30], eax
jmp 0x431222
mov esi, 0x2777
mov edx, 0x40815c
jmp 0x43121a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x24]
cmp eax, 0x2710
jbe 0x4311a7
xor ebx, ebx
mov esi, 0x277a
mov dword [edi + 0x30], ebx
cmp dword [edi + 0x28], ebx
je 0x431190
push dword [edi + 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x28], ebx
mov edx, 0x405f30
push 2
mov ebx, 0x80072efd
pop eax
mov dword [ebp - 0x39c], ebx
mov ecx, eax
jmp 0x43121d
mov esi, 0x2775
mov edx, 0x40814c
jmp 0x43121a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x24]
cmp eax, 0x2710
jbe 0x4311e5
xor ebx, ebx
mov esi, 0x277a
mov dword [edi + 0x30], ebx
cmp dword [edi + 0x28], ebx
je 0x4311de
push dword [edi + 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x28], ebx
mov edx, 0x405f08
jmp 0x431195
mov esi, 0x2776
mov edx, 0x408140
jmp 0x43121a
mov esi, 0x277a
mov dword [edi + 0x30], ecx
mov edx, 0x408138
jmp 0x43121a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x24]
cmp eax, 0x2710
ja 0x4311c3
mov esi, 0x2774
mov edx, 0x40812c
push 4
pop ecx
call fcn.0041e7a8
push 2
pop edx
cmp dword [ebp - 0x39c], 0
je 0x43124e
push dword [ebp - 0x39c]
push 0x406c10
push edx
call fcn.0041e83a
add esp, 0xc
push dword [ebp - 0x39c]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [ebp - 0x398]
cmp eax, 0xffffffff
jne 0x431293
mov edi, 0x80
lea eax, [ebp - 0x108]
push edi
push eax
push 0x26e8
push dword [0x442af0]
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x43130f
push 0x408870
mov edx, edi
lea ecx, [ebp - 0x108]
call fcn.0040c040
jmp 0x43130f
sub eax, dword [ebp - 0x394]
xor edx, edx
push 0x3c
cmp dword [ebp - 0x390], edx
jbe 0x4312ad
div dword [ebp - 0x390]
jmp 0x4312b4
mov ecx, 0x3e80
div ecx
pop ecx
xor edx, edx
mov dword [ebp - 0x3a4], eax
div ecx
mov edi, edx
xor edx, edx
div ecx
mov eax, dword [ebp - 0x3a4]
mov ecx, 0xe10
push edi
push edx
cmp eax, ecx
jb 0x4312f6
xor edx, edx
div ecx
push eax
push 0x405708
lea eax, [ebp - 0x108]
push 0x100
push eax
call fcn.0040c125
add esp, 0x18
jmp 0x43130f
push 0x40572c
lea eax, [ebp - 0x108]
push 0x100
push eax
call fcn.0040c125
add esp, 0x14
push 0x100
lea eax, [ebp - 0x388]
push eax
push esi
push dword [0x442af0]
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
je 0x431457
cmp esi, 0x2777
jne 0x431428
lea ecx, [ebp - 0x388]
xor edi, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, di
jne 0x431347
sub ecx, edx
lea edx, [ebp - 0x108]
sar ecx, 1
lea esi, [edx + 2]
mov ax, word [edx]
add edx, 2
cmp ax, di
jne 0x43135f
sub edx, esi
lea eax, [ecx + 0x21]
sar edx, 1
xor ecx, ecx
add eax, edx
push 2
pop edx
mov dword [ebp - 0x3a8], eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00440dea
mov edi, eax
pop ecx
test edi, edi
je 0x431457
mov esi, dword [ebp - 0x394]
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 0x3a4], 0x80004005
call fcn.0043f3bf
xor eax, eax
lea ecx, [ebp - 0x3b4]
push eax
push esi
call fcn.00422968
test eax, eax
js 0x4313e0
push 0x40
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x3b4]
call fcn.0043f907
mov dword [ebp - 0x3a4], eax
lea ecx, [ebp - 0x3b4]
call fcn.0043f743
cmp dword [ebp - 0x3a4], 0
jl 0x43141f
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x388]
push eax
push dword [ebp - 0x3a8]
push edi
call fcn.0040c0e1
add esp, 0x14
mov ecx, edi
call fcn.0041ddbf
push edi
call fcn.00440db7
pop ecx
jmp 0x431457
mov eax, dword [0x443f94]
test eax, eax
je 0x431457
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x431457
lea eax, [ebp - 0x388]
push eax
xor eax, eax
push eax
push 0x5c5
push dword [0x443f94]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x398]
test ecx, ecx
jne 0x431462
inc ecx
imul eax, dword [ebp - 0x394], 0x64
xor edx, edx
div ecx
mov ecx, eax
call fcn.0041dd92
mov ecx, dword [ebp - 4]
mov eax, ebx
ret
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00441130
leave
ret