Function at 0x411d50
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x474
mov eax, dword [0x510a50]
xor eax, esp
mov dword [esp + 0x470], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edi
test eax, eax
je 0x41203b
mov eax, dword [edi + 4]
sub eax, dword [edi]
test eax, 0xfffffffc
je 0x41203b
push 0x218
lea ecx, [esp + 0x2c]
push 0
push ecx
call fcn.00488a00
mov dl, byte [ebp + 0xc]
mov ebx, dword [sym.imp.KERNEL32.DLL_GetTickCount]
add esp, 0xc
mov byte [esp + 0x13], dl
call ebx
lea esi, [esp + 0x2c7]
call fcn.0042ec00
call ebx
mov edx, esi
lea eax, [esp + 0x13]
mov esi, edi
push eax
mov ecx, esi
call fcn.0042fe80
call ebx
lea ecx, [esp + 0x13]
push ecx
lea edx, [esp + 0x2cb]
mov ecx, esi
call fcn.00430360
call ebx
lea edx, [esp + 0x13]
push edx
lea edx, [esp + 0x2cb]
mov ecx, esi
call fcn.00430660
call ebx
movzx eax, word [esp + 0x2ff]
test eax, eax
jle 0x411e7d
mov edx, dword [esp + 0x301]
lea ebx, [esp + 0x378]
sub ebx, edx
mov dword [esp + 0x14], eax
nop
mov eax, edx
mov cl, byte [eax]
mov byte [ebx + eax], cl
inc eax
test cl, cl
jne 0x411e22
mov eax, dword [0x4f5c2c]
mov dword [edx], eax
mov ecx, dword [0x4f5c30]
lea eax, [esp + 0x378]
mov dword [edx + 4], ecx
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x411e45
sub eax, esi
lea edi, [edx - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x411e51
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
sub ebx, 0x140
add edx, 0x140
dec dword [esp + 0x14]
rep movsb byte es:[edi], byte [esi]
jne 0x411e20
mov esi, dword [esp + 0x20]
mov edi, dword [esi + 4]
sub edi, dword [esi]
mov esi, dword [esp + 0x1c]
movzx eax, word [esi + 0x81]
mov ecx, dword [esi + 0x83]
mov dword [esp + 0x18], eax
sar edi, 2
add eax, edi
mov word [esi + 0x81], ax
movzx eax, ax
mov dword [esp + 0x24], ecx
xor ecx, ecx
mov dword [esp + 0x14], eax
mov edx, 0x9a
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00460bbb
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x411eed
mov eax, dword [esp + 0x14]
dec eax
js 0x411ee7
inc eax
imul eax, eax, 0x9a
push eax
push 0
push ebx
call fcn.00488a00
add esp, 0xc
mov dword [esp + 0x14], ebx
jmp 0x411ef9
mov dword [esp + 0x14], 0
mov ebx, dword [esp + 0x14]
movzx eax, word [esi + 0x81]
imul eax, eax, 0x9a
push eax
push 0
push ebx
call fcn.00488a00
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x30]
imul eax, eax, 0x9a
push eax
push ecx
push ebx
mov dword [esp + 0x30], eax
call fcn.00488b10
mov edx, dword [esp + 0x3c]
push edx
call fcn.00460bb0
mov dword [esi + 0x83], ebx
add esp, 0x1c
xor ebx, ebx
test edi, edi
jle 0x411fad
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
lea esi, [eax + ecx + 0x80]
mov edx, dword [esp + 0x20]
mov eax, dword [edx]
mov ecx, dword [eax + ebx*4]
lea edx, [esi - 0x80]
push edx
sub esp, 0x1c
mov dword [esp + 0x44], esp
mov dword [esp + 0x38], ecx
mov ecx, esp
xor eax, eax
push 0xffffffffffffffff
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x5145e0
mov word [ecx], ax
call fcn.00405350
mov edx, dword [esp + 0x38]
or ecx, 0xffffffff
call fcn.0040d280
mov ecx, 0x2000
or word [esi], cx
inc ebx
add esp, 0x20
add esi, 0x9a
cmp ebx, edi
jl 0x411f51
mov edx, dword [esp + 0x1c]
movzx esi, word [edx + 0xbf]
movzx eax, word [esp + 0x2ff]
xor ecx, ecx
add eax, esi
mov edx, 0x140
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00460bbb
mov ebx, eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0xc1]
lea edi, [esi + esi*4]
shl edi, 6
push edi
push ecx
push ebx
call fcn.00488b10
movzx eax, word [esp + 0x30f]
lea edx, [eax + eax*4]
mov eax, dword [esp + 0x311]
shl edx, 6
push edx
push eax
add edi, ebx
push edi
call fcn.00488b10
mov edi, dword [esp + 0x38]
mov ecx, dword [edi + 0xc1]
push ecx
call fcn.00460bb0
movzx eax, word [esp + 0x31f]
add esp, 0x20
add eax, esi
mov dword [edi + 0xc1], ebx
mov word [edi + 0xbf], ax
mov ecx, dword [esp + 0x47c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004840ae
mov esp, ebp
pop ebp
ret