Function at 0x43fa74
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x569028
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x5c524c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [ebp + 8]
xor ebx, ebx
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x2c], 1
cmp ecx, 0x113
ja 0x43faef
je 0x43fa89
lea eax, [ecx - 1]
cmp eax, 0xa2
ja case.0x43f856.4
movzx eax, byte [eax + 0x43fe88]
jmp dword [eax*4 + 0x43fe50]
mov eax, dword [edi]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, edi
call dword [eax + 0x78]
jmp 0x43fd86
mov eax, dword [edi]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, edi
call dword [eax + 0x48]
jmp 0x43fd86
mov eax, dword [edi]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, edi
call dword [eax + 0x4c]
jmp 0x43fd86
push dword [edi + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
push eax
mov ecx, edi
call fcn.00443880
mov dword [ebp - 0x2c], ebx
xor ebx, ebx
jmp 0x43fd88
mov ecx, edi
call fcn.0048af60
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
xor eax, eax
mov ecx, edi
cmp esi, 1
sete al
push eax
call fcn.00443880
mov dword [ebp - 0x2c], ebx
xor ebx, ebx
jmp 0x43fd88
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp + 0x10]
test ebx, ebx
je 0x43f905
mov ecx, dword [edi + 0x37c]
test ecx, ecx
je 0x43f905
add ecx, 0x280
call fcn.0048af60
and dword [ebx + 0x18], 0xfffffffb
mov dword [ebx + 4], eax
xor ebx, ebx
jmp 0x43fd88
lea ecx, [edi + 0x30]
call fcn.0048ef00
test eax, eax
je case.0x43f856.6
push dword [edi + 4]
call dword [sym.imp.USER32.dll_IsZoomed]
lea ecx, [edi + 0x30]
test eax, eax
je 0x43f949
push str.restore
call fcn.0048e800
test eax, eax
je 0x43f942
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx + 0x10c]
push 0x57c7fc
jmp 0x43f968
push 0x57c7fc
call fcn.0048e800
test eax, eax
je 0x43f963
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx + 0x10c]
push str.restore
lea ecx, [edi + 0x30]
call fcn.0048e800
test eax, eax
je case.0x43f856.6
mov edx, dword [eax]
mov ecx, eax
push 0
call dword [edx + 0x10c]
mov dword [ebp - 0x2c], ebx
xor ebx, ebx
jmp 0x43fd88
mov dword [ebp - 0x2c], ebx
cmp dword [edi + 0x38c], ebx
je 0x43f9b7
mov dword [edi + 0x38c], ebx
cmp dword [edi + 0x388], ebx
je 0x43f9b1
push 0
push 0
push 1
push 0x25
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov dword [edi + 0x388], ebx
xor ebx, ebx
jmp 0x43fd88
mov ecx, dword [edi + 0x37c]
mov dword [ebp - 0x2c], ebx
test ecx, ecx
je 0x43f9dd
add ecx, 0x280
call fcn.0048af60
push eax
call dword [sym.imp.USER32.dll_SetFocus]
cmp dword [edi + 0x38c], ebx
jne 0x43f905
push 0
lea esi, [edi + 0x388]
mov dword [edi + 0x38c], 1
mov dword [esi], ebx
mov ebx, dword [sym.imp.USER32.dll_SystemParametersInfoW]
push esi
push 0
push 0x26
call ebx
cmp dword [esi], 0
je 0x43f905
push 0
push 0
push 0
push 0x25
call ebx
xor ebx, ebx
jmp 0x43fd88
call fcn.00425690
mov ecx, eax
call fcn.00425780
test eax, eax
je 0x43f905
push dword [edi + 4]
call dword [sym.imp.USER32.dll_IsZoomed]
mov ecx, edi
test eax, eax
je 0x43fa53
call fcn.0043eeb0
xor ebx, ebx
jmp 0x43fd88
call fcn.0043ec30
xor ebx, ebx
jmp 0x43fd88
mov eax, dword [edi]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, edi
call dword [eax + 0x5c]
jmp 0x43fd86
mov eax, dword [edi]
lea edx, [ebp - 0x2c]
push edx
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, edi
call dword [eax + 0x6c]
jmp 0x43fd86
cmp esi, 0x10
jne 0x43fad0
push esi
push dword [edi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SwitchToThisWindow]
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push dword [edi + 4]
call esi
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push dword [edi + 4]
call esi
jmp 0x43fd88
cmp esi, 0x11
jne 0x43fd88
push esi
push dword [edi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, edi
call fcn.00443ca0
jmp 0x43fd88
cmp ecx, 0x7e8
ja 0x43fd07
je 0x43fcd5
mov eax, ecx
sub eax, 0x40a
je 0x43fc55
sub eax, 0x5a
je 0x43fb5a
sub eax, 0x12d
jne case.0x43f856.4
test esi, esi
je 0x43fd88
mov ecx, dword [esi + 0x24]
test ecx, ecx
je 0x43fb4a
mov eax, dword [ecx]
call dword [eax + 8]
mov ecx, dword [esi + 0x24]
test ecx, ecx
je 0x43fb4a
mov edx, dword [ecx]
cmp ecx, esi
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov dword [esi + 0x24], ebx
push 0x28
push esi
call fcn.004729bf
add esp, 8
jmp 0x43fd88
lea eax, [ebp - 0x34]
push eax
call fcn.00425690
mov ecx, eax
call fcn.004247f0
mov edx, dword [0x5ceacc]
xor eax, eax
mov ecx, edx
mov dword [ebp - 4], 2
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43fb90
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.0041cb00
mov ecx, dword [ebp - 0x34]
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 3
call fcn.0050f0b0
mov edx, dword [ebp - 0x14]
mov esi, eax
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x43fbf9
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43fbef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43fe40
push edx
push ecx
call fcn.004729bf
add esp, 8
test esi, esi
jne 0x43fc0a
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x43fc15
push 0
push 0
mov ecx, edi
call fcn.0048b960
mov esi, dword [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x43fd88
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x43fd88
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x43fd88
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
jmp 0x43fd88
call fcn.00415c50
mov ecx, eax
test ecx, ecx
je 0x43fe45
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
push str.play
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0
call fcn.0040e400
test al, al
jne 0x43fc96
push 4
push str.play
lea ecx, [ebp - 0x30]
call fcn.0041afc0
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 1
push eax
mov ecx, edi
call fcn.00445aa0
mov edx, dword [ebp - 0x30]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43f905
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor ebx, ebx
jmp 0x43fd88
mov ecx, dword [edi + 0x3a8]
test ecx, ecx
je 0x43fcfb
call fcn.0044a520
mov ecx, dword [edi + 0x3a8]
test ecx, ecx
je 0x43fcf5
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov dword [edi + 0x3a8], ebx
mov ecx, edi
call fcn.0043e850
jmp 0x43fd88
sub ecx, 0x7e9
je 0x43fd72
sub ecx, 1
je 0x43fd19
mov dword [ebp - 0x2c], ebx
jmp 0x43fd88
push 0xb
push str.start_delay
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.0041ca10
push 0
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 4
push eax
lea ecx, [edi + 0x3b0]
call fcn.0050c510
lea ecx, [ebp - 0x28]
imul esi, eax, 0x3e8
mov dword [ebp - 4], 0xffffffff
call fcn.004078d0
push 0
push esi
push 0x11
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x43fd88
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
push dword [ebp + 0x10]
push esi
push 0x7e9
call fcn.00441f20
mov ebx, eax
mov eax, dword [edi + 0x360]
mov esi, dword [ebp + 8]
test eax, eax
je 0x43fe0a
cmp esi, eax
jne 0x43fe0a
mov eax, dword [ebp + 0x10]
add eax, 0xfffffdfe
cmp eax, 1
ja 0x43fe08
cmp dword [0x5ceb68], 0
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
je 0x43fdc4
call ebx
sub eax, dword [0x5ceb68]
cmp eax, 0x1f4
jb 0x43fe01
call ebx
cmp dword [edi + 0x37c], 0
mov dword [0x5ceb68], eax
je 0x43fdf6
push dword [edi + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x43fdf6
mov ecx, dword [edi + 0x37c]
push 1
push 1
add ecx, 0x280
call fcn.0048b960
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x2c], 1
xor ebx, ebx
cmp dword [ebp - 0x2c], 0
je 0x43fe14
mov eax, ebx
jmp 0x43fe22
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp - 0x38]
push esi
call fcn.00495dd0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0047285d
mov esp, ebp
pop ebp
ret 0xc
call fcn.00522b89
push 0x80004005
call fcn.0040e3e0
nop
pop ebp
clc
inc ebx
add byte [edi - 0x63ffbc08], al
clc
inc ebx
add byte [edx + edi*8 + 0x43], dh
add byte [eax + 0x720043f9], al
clc
inc ebx
add byte [edi - 0x20ffbc08], dh
clc
inc ebx
add byte [ecx + edi*8], cl
inc ebx
add byte [edi - 6], bl
inc ebx
add byte [edx - 0x41ffbc07], cl
stc
inc ebx
add byte [edx + edi*8], ah
inc ebx
add byte [edi*8 + 0x1000043], dl
add cl, byte [0xd0d0403]
or eax, 218959117
or eax, 218957069
or eax, 218959117
push es
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
pop es
or byte [218959117], cl
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or dword [218959117], ecx
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218827277
or al, 204
int3