Function at 0xb41688
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 4
push 0
push 0
dec ecx
jne 0xb41690
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x10], edx
mov ebx, eax
xor eax, eax
push ebp
push 0xb418d3
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x11], 0
mov eax, dword [ebx + 0xc]
test eax, eax
je 0xb416be
sub eax, 4
mov eax, dword [eax]
test eax, eax
jle 0xb418a3
lea eax, [ebp - 0x1c]
mov edx, dword [ebx + 0xc]
call fcn.00a15d8c
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 4]
mov dl, 1
call fcn.00af2fb4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 8]
lea edx, [ebp - 0x12]
mov eax, dword [ebp - 4]
call fcn.00b405b8
xor eax, eax
push ebp
push 0xb41899
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00b3e5ac
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
call fcn.00b3d6c4
movzx edx, byte [ebp - 0x12]
mov eax, dword [ebp - 0x10]
call fcn.00b3d71c
lea edx, [ebp - 0x20]
movzx eax, word [ebp - 0x14]
call fcn.00a1a790
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00b3d6f0
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.00b3d75c
mov dl, 1
mov eax, dword [0xa2ac9c]
call fcn.00a14440
mov dword [ebp - 0x18], eax
xor eax, eax
push ebp
push 0xb41888
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.00b3d7ec
mov eax, dword [ebp - 0x10]
call fcn.00b3e900
call sub.kernel32.dll_GetTickCount_1
mov esi, eax
push 1
call sub.kernel32.dll_Sleep_2
call sub.kernel32.dll_GetTickCount_1
sub eax, esi
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xc]
cdq
cmp edx, dword [esp + 4]
jne 0xb417a4
cmp eax, dword [esp]
pop edx
pop eax
ja 0xb417b9
jmp 0xb417a8
pop edx
pop eax
jg 0xb417b9
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0xb417b9
cmp eax, 0
je 0xb417e7
cmp byte [ebx + 4], 0
je 0xb417d1
call fcn.00a14dd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xb418a3
mov eax, dword [ebp - 0x10]
call fcn.00b3d524
sub al, 2
je 0xb417e7
sub al, 2
je 0xb417e7
add al, 0xf9
sub al, 2
jae 0xb4177c
cmp byte [ebx + 4], 0
je 0xb417ff
call fcn.00a14dd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xb418a3
mov eax, dword [ebp - 0x10]
call fcn.00b3d524
cmp al, 0xb
jne 0xb41851
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 4]
call fcn.00aed6a4
mov eax, dword [ebp - 0x24]
mov edx, dword [ebx + 0x10]
call fcn.00a1a374
test al, al
je 0xb41842
mov edx, dword [ebx + 0x14]
mov eax, dword [ebp - 0x18]
call fcn.00a30300
mov byte [ebp - 0x11], 1
jmp 0xb4185e
lea eax, [ebx + 0x18]
mov edx, 0xb418f0
call fcn.00a15444
jmp 0xb4185e
lea eax, [ebx + 0x18]
mov edx, 0xb41900
call fcn.00a15444
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xb4188f
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00b3d7ec
mov eax, dword [ebp - 0x18]
call fcn.00a14470
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00b3e5ac
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xb418da
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00a15414
lea eax, [ebp - 0x1c]
call fcn.00a15c08
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00a15414
ret