Function at 0x740fb4
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], eax
mov ecx, 7
lea eax, [ebp - 0x20]
mov edx, dword [0x4012b8]
call fcn.0040a328
xor eax, eax
push ebp
push 0x741937
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x7ccfb4], 0
je 0x741005
xor eax, eax
call fcn.00737fe0
mov byte [ebp - 0x21], 0
mov eax, dword [0x7b0df4]
mov eax, dword [eax]
shr eax, 0x10
cmp eax, 0x600
mov eax, dword [0x7b0830]
setae byte [eax]
xor ecx, ecx
push ebp
push 0x741878
push dword fs:[ecx]
mov dword fs:[ecx], esp
cmp dword [0x7ccfc4], 0
je 0x741043
mov dl, 1
mov eax, dword [0x7ccfc4]
call fcn.006ec50c
cmp byte [0x7ccfb2], 0
je 0x7410b0
xor eax, eax
push ebp
push 0x741083
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7ccfb8], 0
jne 0x74106f
mov eax, 0x741954
call fcn.006ed050
jmp 0x741079
mov eax, dword [0x7ccfb8]
call fcn.006ed234
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7410b0
mov eax, 0x7419bc
call fcn.006ed290
lea eax, [ebp - 0x2c]
mov ecx, dword [0x7ccf9c]
mov edx, 0x741a20
call fcn.00409ad4
mov eax, dword [ebp - 0x2c]
call fcn.006ed290
lea eax, [ebp - 0x30]
mov ecx, dword [0x7ccfa0]
mov edx, 0x741a60
call fcn.00409ad4
mov eax, dword [ebp - 0x30]
call fcn.006ed290
lea eax, [ebp - 0x38]
call fcn.006047d4
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x34]
mov edx, 0x741a8c
call fcn.00409ad4
mov eax, dword [ebp - 0x34]
call fcn.006ed290
call fcn.00738190
xor eax, eax
call fcn.007408e0
mov dword [0x7ccfa8], eax
mov dl, 1
mov eax, dword [0x73fb78]
call fcn.0070c264
mov dword [0x7afefc], eax
mov ecx, dword [0x7ccfa0]
mov edx, dword [0x7ccfa8]
mov eax, dword [0x7afefc]
call fcn.0070eeb0
lea ecx, [ebp - 0x3c]
mov eax, dword [0x7afefc]
mov edx, dword [eax + 0x18]
mov al, 0xc7
call fcn.0060ae60
mov edx, dword [ebp - 0x3c]
mov eax, 0x7ccfac
call fcn.00408b94
mov eax, dword [0x7afefc]
test byte [eax + 0x1d], 0x20
je 0x7411ab
mov eax, dword [0x7b09f4]
cmp byte [eax], 0
jne 0x7411ab
push 1
push 1
mov eax, dword [0x7ccfac]
call fcn.00409868
push eax
mov eax, dword [0x7b0f88]
mov eax, dword [eax + 0x354]
call fcn.00409868
mov ecx, 0x30
pop edx
call fcn.00738a78
call fcn.00428380
mov eax, dword [0x7afefc]
test byte [eax + 0x1d], 1
je 0x7411ef
mov eax, dword [0x7b0cd0]
cmp byte [eax], 0
jne 0x7411ef
push 1
push 1
mov eax, dword [0x7ccfac]
call fcn.00409868
push eax
mov eax, dword [0x7b0f88]
mov eax, dword [eax + 0x1f8]
call fcn.00409868
mov ecx, 0x30
pop edx
call fcn.00738a78
call fcn.00428380
mov eax, dword [0x7ccfa8]
xor edx, edx
mov dword [0x7ccfa8], edx
call fcn.00406a20
mov al, 2
call fcn.007408e0
mov dword [0x7ccfa8], eax
lea eax, [ebp - 0x20]
push eax
push 6
mov ecx, 0x86000500
mov dx, 0x20
mov eax, dword [0x7afefc]
call fcn.0070c720
test al, al
jne 0x741234
mov eax, 0x741acc
call fcn.006e420c
cmp dword [0x7ccfc4], 0
je 0x74124f
lea eax, [ebp - 4]
mov edx, dword [0x7b0d74]
mov edx, dword [edx]
call fcn.00408c78
jmp 0x74125a
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x20]
call fcn.00740f54
mov eax, dword [0x7afefc]
test byte [eax + 0x1d], 0x80
setne al
call fcn.007390ac
mov eax, dword [0x7afefc]
cmp byte [eax + 0x10], 0
je 0x741293
mov eax, dword [0x7b09f4]
cmp byte [eax], 0
jne 0x74128a
mov eax, 0x741b64
call fcn.006e420c
mov al, 1
call fcn.007391d4
jmp 0x74129a
xor eax, eax
call fcn.007391d4
call fcn.00736208
cmp dword [ebp - 4], 0
je 0x7413d4
call fcn.00735b70
call fcn.00736540
mov eax, dword [0x7b0868]
mov edx, dword [0x7ccf9c]
call fcn.00408b94
mov eax, dword [0x7b0e84]
mov edx, dword [0x7afefc]
mov edx, dword [edx + 0x14]
call fcn.00408b94
movzx eax, byte [0x7ccfb3]
or al, byte [0x7ccfb4]
mov edx, dword [0x7b0ac0]
mov byte [edx], al
mov eax, dword [0x7b121c]
mov edx, dword [ebp - 0x18]
call fcn.00408b94
mov eax, dword [0x7b0c5c]
mov edx, dword [ebp - 0x14]
call fcn.00408b94
mov eax, dword [0x7b0a18]
mov edx, dword [ebp - 0x10]
call fcn.00408b94
mov eax, dword [0x7b0afc]
mov edx, dword [ebp - 0xc]
call fcn.00408b94
mov edx, dword [ebp - 8]
mov eax, edx
test eax, eax
je 0x74132d
sub eax, 4
mov eax, dword [eax]
add eax, eax
xchg edx, eax
call fcn.00740e9c
mov dl, 1
mov eax, dword [0x728c80]
call fcn.0072a13c
mov edx, dword [0x7b0b3c]
mov dword [edx], eax
mov eax, dword [0x7b0b3c]
mov eax, dword [eax]
add eax, 4
mov edx, 0x741bf8
call fcn.00408b94
mov eax, 0x737a50
mov edx, dword [0x7b0b3c]
mov edx, dword [edx]
mov dword [edx + 0x10], eax
mov eax, 0x737a58
mov edx, dword [0x7b0b3c]
mov edx, dword [edx]
mov dword [edx + 0x14], eax
mov eax, 0x737a60
mov edx, dword [0x7b0b3c]
mov edx, dword [edx]
mov dword [edx + 0x18], eax
mov eax, 0x737c80
mov edx, dword [0x7b0b3c]
mov edx, dword [edx]
mov dword [edx + 0x1c], eax
mov eax, 0x737c98
mov edx, dword [0x7b0b3c]
mov edx, dword [edx]
mov dword [edx + 0x20], eax
mov eax, 0x737ca4
mov edx, dword [0x7b0b3c]
mov edx, dword [edx]
mov dword [edx + 0x24], eax
mov ecx, dword [0x7b0c04]
mov ecx, dword [ecx]
mov eax, dword [0x7b0b3c]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.0072a234
xor edx, edx
push ebp
push 0x741824
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x741757
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x7b0b3c]
cmp dword [eax], 0
je 0x741465
xor edx, edx
push ebp
push 0x741439
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
push 2
push 0
push 1
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x7b0b3c]
mov eax, dword [eax]
mov edx, 0x741c10
call fcn.0072a89c
pop dword fs:[0]
add esp, 8
jmp 0x741452
test al, al
jne 0x741465
mov eax, 0x741ca0
call fcn.006ed290
call fcn.00428380
cmp byte [0x7ccfb3], 0
jne 0x74149f
cmp byte [0x7ccfb4], 0
jne 0x74149f
push 0x124
push 1
push 6
mov eax, dword [0x7afefc]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x7ccfac]
mov al, 0x2c
call fcn.00740018
cmp eax, 6
je 0x74149f
call fcn.00428380
xor edx, edx
xor eax, eax
call fcn.00740754
jmp 0x7414cd
push 0x31
push 1
push 2
mov eax, dword [0x7afefc]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x7ccfac]
mov al, 0xd3
call fcn.00740018
dec eax
je 0x7414cd
call fcn.00428380
mov eax, dword [0x7afefc]
call fcn.0070c768
test al, al
jne 0x7414aa
jmp 0x7414f0
push 0xa
call sub.kernel32.dll_Sleep
mov eax, dword [0x7b0f6c]
mov eax, dword [eax]
call fcn.005f7440
mov eax, dword [0x7b12e8]
cmp byte [eax], 0
jne 0x7414dd
mov eax, dword [0x7b0830]
mov byte [eax], 0
lea ecx, [ebp - 0x48]
mov eax, dword [0x7afefc]
mov edx, dword [eax + 0x18]
mov al, 0xb7
call fcn.0060ae60
mov edx, dword [ebp - 0x48]
mov eax, dword [0x7b0f6c]
mov eax, dword [eax]
mov eax, dword [eax + 0x188]
call fcn.006060d4
call fcn.0073fe38
xor edx, edx
mov al, 1
call fcn.00740754
call sub.kernel32.dll_GetTickCount
mov dword [ebp - 0x28], eax
mov eax, dword [0x7afefc]
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x24], edx
mov ecx, 0x74029c
mov dl, 1
mov eax, dword [0x7afefc]
call fcn.0070d53c
mov byte [ebp - 0x22], al
movzx eax, byte [ebp - 0x22]
mov edx, dword [0x7b0de4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea edx, [ebp - 0x44]
xor ecx, ecx
mov eax, 0x741d08
call fcn.006ed514
mov eax, dword [0x7afefc]
cmp byte [eax + 0x1c], 0
jne 0x74159b
mov eax, dword [0x7afefc]
test byte [eax + 0x1d], 8
jne 0x74159b
xor eax, eax
jmp 0x74159d
mov al, 1
mov byte [ebp - 0x23], al
mov eax, dword [0x7b0b3c]
cmp dword [eax], 0
je 0x74163f
mov eax, dword [0x7b0b3c]
mov eax, dword [eax]
mov cl, 1
mov edx, 0x741d34
call fcn.0072a490
test al, al
je 0x74163f
cmp byte [ebp - 0x23], 0
jne 0x741635
xor eax, eax
push ebp
push 0x74161a
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 1
push 0
push 0
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x7b0b3c]
mov eax, dword [eax]
mov edx, 0x741d34
call fcn.0072a89c
test al, al
je 0x741610
mov byte [ebp - 0x23], 1
mov eax, 0x741d58
call fcn.006ed290
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x74163f
mov eax, 0x741e38
call fcn.006ed290
movzx eax, byte [ebp - 0x23]
mov edx, dword [0x7b0de4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea edx, [ebp - 0x44]
xor ecx, ecx
mov eax, 0x741ef0
call fcn.006ed514
cmp byte [0x7ccfb4], 0
jne 0x74169a
mov eax, dword [0x7b0f6c]
mov eax, dword [eax]
call fcn.005f7440
call sub.kernel32.dll_GetTickCount
sub eax, dword [ebp - 0x28]
cmp eax, 0x3e8
jae 0x74169a
push 0x4ff
push 0xa
push 0
push 0
push 0
call sub.user32.dll_MsgWaitForMultipleObjects
jmp 0x74166b
mov eax, dword [0x7b0a34]
mov eax, dword [eax]
mov edx, dword [0x7b0a34]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00406a20
mov dl, 1
mov al, 2
call fcn.00740754
cmp byte [ebp - 0x23], 0
jne 0x7416fb
cmp byte [0x7ccfb3], 0
jne 0x741744
cmp byte [0x7ccfb4], 0
jne 0x741744
push 0x10040
push 1
push 1
movzx eax, byte [ebp - 0x22]
movzx eax, byte [eax + 0x7aff08]
mov edx, dword [0x7afefc]
mov edx, dword [edx + 0x18]
mov ecx, dword [0x7ccfac]
call fcn.00740018
jmp 0x741744
cmp byte [0x7ccfb5], 0
jne 0x741734
cmp byte [0x7ccfb4], 0
jne 0x741730
push 0x10024
push 1
push 6
mov eax, dword [0x7afefc]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x7ccfac]
mov al, 0xd1
call fcn.00740018
cmp eax, 6
jne 0x741734
mov byte [ebp - 0x21], 1
cmp byte [ebp - 0x21], 0
jne 0x741744
mov eax, 0x741f34
call fcn.006ed290
mov dl, 1
mov al, 3
call fcn.00740754
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x74176b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x74182e
xor edx, edx
push ebp
push 0x7417a6
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x7b0a34]
mov eax, dword [eax]
mov edx, dword [0x7b0a34]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00406a20
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7417b5
mov eax, dword [0x7b0b3c]
cmp dword [eax], 0
je 0x741811
xor eax, eax
push ebp
push 0x7417f8
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x7b0b3c]
mov eax, dword [eax]
mov edx, 0x741f90
call fcn.0072a634
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x741811
mov eax, dword [0x7b0f6c]
mov eax, dword [eax]
mov eax, dword [eax + 0x188]
call fcn.00606164
ret