Function at 0x407d10
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov edx, 0x8000
mov ebp, esp
push edi
mov edi, 0x41c080
push esi
push ebx
sub esp, 0xbc
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0x14]
cmp dword [ebp + 0x10], 0
cmovne edi, dword [ebp + 0x10]
cmovne edx, ebx
test eax, eax
mov dword [ebp - 0xac], edx
js 0x407d50
add eax, dword [0x44eab8]
mov dword [esp], eax
call fcn.00407430
push eax
lea eax, [ebp - 0x9c]
mov dword [esp + 4], 4
mov dword [esp], eax
call fcn.004065b0
push esi
test eax, eax
push esi
je 0x407f88
mov eax, dword [ebp - 0x9c]
test eax, eax
jns 0x407f96
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, ebx
mov dword [0x42c0b0], 8
mov dword [0x42c5cc], 0
mov dword [0x42c5c8], 0
mov dword [0x435c58], 0x42dc50
mov dword [0x435c54], 0x42dc50
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x9c]
mov dword [0x435c50], 0x435c50
and eax, 0x7fffffff
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x9c], eax
mov esi, dword [ebp - 0x9c]
test esi, esi
jle 0x407fc1
mov dword [esp], 0x418080
cmp esi, 0x4000
mov eax, 0x4000
cmovg esi, eax
mov dword [esp + 4], esi
call fcn.004065b0
push ecx
test eax, eax
push ecx
je 0x407f88
sub dword [ebp - 0x9c], esi
mov dword [0x42c0a0], 0x418080
mov dword [0x42c0a4], esi
mov dword [esp], 0x42c0a0
mov eax, dword [ebp - 0xac]
mov dword [0x42c0a8], edi
mov dword [0x42c0ac], eax
call fcn.00408680
mov dword [ebp - 0xb8], eax
test eax, eax
push edx
js 0x407f8f
mov esi, dword [0x42c0a8]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub esi, edi
test byte [0x44ea54], 1
mov edx, eax
je 0x407ee5
mov ecx, edx
mov eax, dword [ebp - 0x9c]
sub ecx, dword [ebp - 0xb4]
cmp ecx, 0xc8
ja 0x407e8a
test eax, eax
jne 0x407ee5
mov dword [ebp - 0xb4], edx
mov ecx, dword [ebp - 0xb0]
mov dword [esp + 4], 0x64
mov dword [esp + 8], ecx
mov edx, ecx
sub edx, eax
mov dword [esp], edx
call dword [sym.imp.KERNEL32.dll_MulDiv]
lea ecx, [ebp - 0x98]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], str....__d__
call dword [sym.imp.USER32.dll_wsprintfW]
lea ecx, [ebp - 0x98]
mov dword [esp + 4], ecx
mov dword [esp], 0
call fcn.0040aaa4
push eax
push eax
test esi, esi
je 0x407ddf
cmp dword [ebp + 0x10], 0
jne 0x407f15
mov dword [esp + 8], esi
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.0040a010
sub esp, 0xc
test eax, eax
je 0x407fbc
add ebx, esi
jmp 0x407f23
sub dword [ebp - 0xac], esi
add ebx, esi
mov edi, dword [0x42c0a8]
cmp dword [ebp - 0xb8], 1
jne 0x407e2b
jmp 0x407fc1
mov dword [esp + 8], esi
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], 0x418080
mov dword [esp], eax
call fcn.0040a010
sub esp, 0xc
test eax, eax
je 0x407fbc
sub dword [ebp - 0x9c], esi
add ebx, esi
mov esi, dword [ebp - 0x9c]
test esi, esi
jle 0x407fc1
cmp esi, dword [ebp - 0xac]
mov dword [esp], 0x418080
cmovg esi, dword [ebp - 0xac]
mov dword [esp + 4], esi
call fcn.004065b0
push ecx
test eax, eax
push ecx
jne 0x407f35
mov ebx, 0xfffffffd
jmp 0x407fc1
mov ebx, 0xfffffffc
jmp 0x407fc1
cmp dword [ebp + 0x10], 0
jne 0x407fa0
xor ebx, ebx
jmp 0x407f5b
cmp eax, ebx
cmovle ebx, eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004065b0
push edx
test eax, eax
push edx
jne 0x407fc1
jmp 0x407f88
mov ebx, 0xfffffffe
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 0x10