Function at 0x40ffb0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf0
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0xf0]
mov ecx, 0x3c
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xb4]
add ecx, 1
mov edx, dword [ebp - 8]
mov dword [edx + 0xb4], ecx
mov eax, dword [ebp - 8]
cmp dword [eax + 0xb4], 0x64
jne 0x410009
mov eax, dword [ebp - 8]
mov dword [eax + 0xb4], 0
mov ecx, dword [ebp - 8]
call fcn.004106e0
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xb0]
add ecx, 1
mov edx, dword [ebp - 8]
mov dword [edx + 0xb0], ecx
mov eax, dword [ebp - 8]
cmp dword [eax + 0xb0], 0x20
jne 0x410053
mov eax, dword [ebp - 8]
mov dword [eax + 0xb0], 0
mov eax, dword [ebp - 8]
cmp dword [eax + 0xbc], 0
jne 0x41004b
mov ecx, dword [ebp - 8]
call fcn.004108c0
mov ecx, dword [ebp - 8]
call fcn.0040de80
mov eax, dword [ebp - 8]
cmp dword [eax + 0xb8], 0
je 0x410064
jmp 0x410239
mov eax, dword [ebp - 8]
cmp dword [eax + 0xbc], 0
jne 0x410239
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.0043234a
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
cmp dword [eax + 0xa0], 0
je 0x4100a0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax + 0xa0]
jbe 0x4100da
cmp dword [0x462328], 0
je 0x4100da
mov eax, dword [0x462328]
cmp dword [eax + 0x88], 2
jne 0x4100da
mov eax, dword [ebp - 0x14]
add eax, 0x7530
mov ecx, dword [ebp - 8]
mov dword [ecx + 0xa0], eax
mov eax, dword [ebp - 8]
add eax, 8
push eax
mov ecx, dword [0x462328]
call fcn.0040b610
mov eax, dword [ebp - 8]
cmp dword [eax + 0xa4], 0
je 0x4100f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax + 0xa4]
jbe 0x4101a4
mov eax, dword [ebp - 8]
add eax, 8
push eax
mov ecx, dword [0x462378]
call fcn.00425270
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x60]
mov edx, dword [ebp - 8]
add ecx, dword [edx + 0x54]
cmp ecx, 0xa
jae 0x41013a
mov eax, dword [ebp - 8]
cmp dword [eax + 0xa8], 0x14
jae 0x41013a
mov eax, dword [ebp - 0x14]
add eax, 0x1388
mov ecx, dword [ebp - 8]
mov dword [ecx + 0xa4], eax
jmp 0x41018f
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x60]
mov edx, dword [ebp - 8]
add ecx, dword [edx + 0x54]
cmp ecx, 0x64
jae 0x41016a
mov eax, dword [ebp - 8]
cmp dword [eax + 0xa8], 0x14
jae 0x41016a
mov eax, dword [ebp - 0x14]
add eax, 0x2710
mov ecx, dword [ebp - 8]
mov dword [ecx + 0xa4], eax
jmp 0x41018f
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xa8]
imul ecx, ecx, 0x3c
imul ecx, ecx, 0x3e8
mov edx, dword [ebp - 0x14]
lea eax, [edx + ecx + 0xea60]
mov ecx, dword [ebp - 8]
mov dword [ecx + 0xa4], eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xa8]
add ecx, 1
mov edx, dword [ebp - 8]
mov dword [edx + 0xa8], ecx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x2c], 0x32000
mov dword [ebp - 0x20], 0x12c
mov eax, dword [0x4623f8]
and eax, 1
jne 0x4101eb
mov eax, dword [0x4623f8]
or eax, 1
mov dword [0x4623f8], eax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.0043234a
mov dword [0x4623f4], eax
cmp dword [0x4623f4], 0
je 0x410203
mov eax, dword [0x4623f4]
add eax, 0x12c
cmp dword [ebp - 0x14], eax
jbe 0x410239
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x60]
mov edx, dword [ebp - 8]
add ecx, dword [edx + 0x7c]
cmp ecx, dword [ebp - 0x20]
jae 0x410239
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc0]
cmp ecx, dword [ebp - 0x2c]
jae 0x410239
mov ecx, dword [ebp - 8]
call fcn.0040fa10
movzx eax, al
test eax, eax
je 0x410239
mov eax, dword [ebp - 0x14]
mov dword [0x4623f4], eax
pop edi
pop esi
pop ebx
add esp, 0xf0
cmp ebp, esp
call fcn.0043234a
mov esp, ebp
pop ebp
ret