Function at 0x40683b
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x12c
mov eax, dword [0x42733c]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0x10]
and dword [ebp - 0x124], 0
mov ecx, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 8]
push edi
mov eax, 0x400
mov edi, edx
and edi, eax
sub edi, eax
neg edi
sbb edi, edi
inc edi
cmp dword [0x4280d8], 0
jne 0x40689e
mov eax, dword [0x428370]
mov dword [0x42a00c], 0x106
mov byte [0x429f00], 0
mov dword [0x42a008], eax
mov dword [0x4280d8], 1
test ebx, ebx
je 0x406c73
push esi
test ecx, ecx
jne 0x40699b
push dword [ebx]
call fcn.004091a2
mov esi, eax
push esi
push 0x104
push 0x42a140
call fcn.00419fc8
add esp, 0xc
push esi
push dword [ebx]
call fcn.00409287
push dword [ebx + 4]
call fcn.004091a2
mov esi, eax
push esi
push 0x104
push 0x42a020
call fcn.00419fc8
add esp, 0xc
push esi
push dword [ebx + 4]
call fcn.00409287
cmp dword [0x428374], 0
jne 0x406932
push 1
call fcn.0040d3af
push 0
push 0x406f4a
push dword [0x429ea8]
push 0x401528
push dword [0x429eac]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
push 0
mov esi, eax
call fcn.0040d3af
jmp 0x406934
xor esi, esi
test esi, esi
je 0x406c72
mov esi, 0x429f00
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406946
sub ecx, edx
jne 0x406985
cmp dword [0x428374], ecx
jne 0x406985
push 1
call fcn.0040d3af
push 0x10
push 0x4012e8
push 0x29a
call fcn.0040d387
push eax
push dword [0x429ea8]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.0040d3af
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40698a
sub ecx, edx
je 0x4068f9
jmp 0x4069b5
push ecx
push 0x104
mov esi, 0x429f00
push esi
mov dword [0x42a00c], edx
call fcn.00419fc8
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
test dword [0x42a00c], 0x100
mov dword [0x4280e0], eax
je 0x4069d0
push dword [ebx]
jmp 0x4069d3
push dword [ebx + 4]
call fcn.0040969b
test eax, eax
je 0x406c72
mov eax, dword [0x42a004]
push dword [ebx + 8]
mov dword [ebp - 0x12c], eax
call fcn.00413530
mov esi, eax
mov dword [ebp - 0x120], esi
jmp 0x406b57
cmp dword [0x429d24], 0
jne 0x406ba7
cmp dword [0x42a008], 0
je 0x406a24
push esi
call fcn.00404984
test eax, eax
jne 0x406b49
push esi
call fcn.00404430
mov ecx, dword [0x42a00c]
cmp eax, 1
jne 0x406a3e
test cl, 1
je 0x406b49
cmp eax, 4
jne 0x406a4c
test cl, 2
je 0x406b49
cmp eax, 5
jne 0x406a59
test ecx, 0x200
jmp 0x406a64
cmp eax, 6
jne 0x406a73
test ecx, 0x100
jne 0x406b49
test cl, 0xc
je 0x406b49
push esi
test ecx, 0x100
je 0x406a83
call fcn.00407b8a
jmp 0x406a88
call fcn.00408667
push eax
call fcn.00407b8a
push dword [ebp - 0x12c]
mov dword [ebp - 0x128], eax
push edi
push 0x429f00
push eax
call fcn.004094bd
test eax, eax
jne 0x406b07
push dword [ebp - 0x128]
call fcn.00409151
mov esi, eax
push esi
push 0x29b
call fcn.0040d387
push eax
lea eax, [ebp - 0x11c]
push 0x118
push eax
call fcn.0041a2bf
add esp, 0x10
push esi
push dword [ebp - 0x128]
call fcn.00409261
push 1
lea eax, [ebp - 0x11c]
push eax
call fcn.0040d3d1
test eax, eax
je 0x406ba7
mov esi, dword [ebp - 0x120]
mov eax, dword [ebp - 0x124]
jmp 0x406b14
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
push eax
push 0x29c
call fcn.0040d387
push eax
lea eax, [ebp - 0x11c]
push 0x118
push eax
call fcn.0041a2bf
add esp, 0x10
lea eax, [ebp - 0x11c]
push eax
call fcn.0040d484
call fcn.0040d422
test eax, eax
jne 0x406b61
push esi
call fcn.0041357f
mov esi, eax
mov dword [ebp - 0x120], eax
test esi, esi
jne 0x406a00
jmp 0x406ba7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x4280e0]
cmp dword [0x428374], 0
mov dword [0x4280e0], eax
jne 0x406ba7
push 1
call fcn.0040d3af
push 0x40
push 0x4012b8
push 0x29d
call fcn.0040d387
push eax
push dword [0x429ea8]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.0040d3af
push dword [ebp - 0x124]
push 0x2d0
call fcn.0040d387
push eax
mov edi, 0x118
lea eax, [ebp - 0x11c]
push edi
push eax
call fcn.0041a2bf
add esp, 0x10
lea eax, [ebp - 0x11c]
push eax
call fcn.0040d484
test dword [0x42a00c], 0x100
je 0x406be9
push dword [ebx]
jmp 0x406bec
push dword [ebx + 4]
call fcn.004096a8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x4280e0]
mov dword [0x4280e0], eax
test esi, esi
jns 0x406c12
neg esi
push esi
push 0x29e
jmp 0x406c18
push esi
push 0x29f
call fcn.0040d387
push eax
lea eax, [ebp - 0x11c]
push edi
push eax
call fcn.0041a2bf
add esp, 0x10
cmp dword [0x428374], 0
jne 0x406c5f
push 1
call fcn.0040d3af
push 0x40
push 0x4012b8
lea eax, [ebp - 0x11c]
push eax
push dword [0x429ea8]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.0040d3af
lea eax, [ebp - 0x11c]
push eax
mov byte [ebp - 0x11c], 0
call fcn.0040d484
pop esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.00419fba
leave
ret 0xc