Function at 0x41a280
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x434e34
mov eax, dword fs:[0]
push eax
sub esp, 0x214
mov eax, dword [0x43fd90]
xor eax, ebp
mov dword [ebp - 0x28], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jge 0x41a2d9
xor eax, eax
jmp 0x41aef3
push 0x2f4
call fcn.0041ff76
add esp, 4
mov dword [ebp - 0x10], eax
push 0x2f4
push 0
mov eax, dword [ebp - 0x10]
push eax
call fcn.0041f6d0
add esp, 0xc
cmp dword [ebp + 0xc], 0
je 0x41a30b
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0
mov dword [ebp - 0x14], 0
call fcn.0041e790
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x1fc], 0
push 0x7f
push 0
lea edx, [ebp - 0x1fb]
push edx
call fcn.0041f6d0
add esp, 0xc
cmp dword [0x4718e8], 1
jne 0x41a38f
push 0x80
push 0
lea eax, [ebp - 0x1fc]
push eax
call fcn.0041f6d0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
push ecx
push str.initVideo_ZKFPI_Init_ret_d_n
lea edx, [ebp - 0x1fc]
push edx
call fcn.004208cb
add esp, 0xc
lea eax, [ebp - 0x1fc]
push eax
call fcn.00420840
add esp, 4
push eax
push 0x436e10
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.0040f6d0
add esp, 0xc
cmp dword [ebp - 0x14], 0
jle 0x41a5ce
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov dword [edx + 0x274], eax
push 0
call fcn.0041e830
add esp, 4
call fcn.0041e860
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x41a551
push 0x50
mov ecx, dword [ebp - 0x10]
add ecx, 0x20
push ecx
call fcn.0041ea30
add esp, 8
push 0x50
mov edx, dword [ebp - 0x10]
add edx, 0x70
push edx
call fcn.0041ea80
add esp, 8
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x270], 1
push 0x40
call fcn.00420a17
add esp, 4
mov dword [ebp - 0x208], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x208], 0
je 0x41a423
mov ecx, dword [ebp - 0x208]
call fcn.00401000
mov dword [ebp - 0x218], eax
jmp 0x41a42d
mov dword [ebp - 0x218], 0
mov ecx, dword [ebp - 0x218]
mov dword [ebp - 0x204], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x204]
mov dword [edx + 0x1c], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x1c]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x270]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x1c], 0
je 0x41a473
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
cmp dword [ecx + 4], 0
jne 0x41a4ec
cmp dword [0x4718e8], 1
jne 0x41a4ca
push 0x80
push 0
lea edx, [ebp - 0x1fc]
push edx
call fcn.0041f6d0
add esp, 0xc
push str.initVideo_Create_CapTool_Failed_n
lea eax, [ebp - 0x1fc]
push eax
call fcn.004208cb
add esp, 8
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.00420840
add esp, 4
push eax
push 0x436e48
lea edx, [ebp - 0x1fc]
push edx
call fcn.0040f6d0
add esp, 0xc
cmp dword [ebp + 0xc], 0
je 0x41a4d9
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xfffffffe
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00419da0
add esp, 4
xor eax, eax
jmp 0x41aef3
mov dword [ebp - 0x20c], 0x34
mov edx, dword [ebp - 0x20c]
push edx
call fcn.00420a17
add esp, 4
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
je 0x41a53a
mov eax, dword [ebp - 0x20c]
push eax
push 0
mov ecx, dword [ebp - 0x210]
push ecx
call fcn.0041f6d0
add esp, 0xc
mov edx, dword [ebp - 0x210]
mov dword [ebp - 0x21c], edx
jmp 0x41a544
mov dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [0x472328], eax
jmp 0x41a5ce
cmp dword [0x4718e8], 1
jne 0x41a5ac
push 0x80
push 0
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.0041f6d0
add esp, 0xc
mov edx, dword [ebp - 0x14]
push edx
push str.initVideo_ZKFPI_Open_Failed_ret_d_n
lea eax, [ebp - 0x1fc]
push eax
call fcn.004208cb
add esp, 0xc
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.00420840
add esp, 4
push eax
push 0x436e80
lea edx, [ebp - 0x1fc]
push edx
call fcn.0040f6d0
add esp, 0xc
cmp dword [ebp + 0xc], 0
je 0x41a5bb
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xffffffff
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00419da0
add esp, 4
xor eax, eax
jmp 0x41aef3
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x270], 0
jne 0x41a668
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00417b20
add esp, 8
movzx edx, al
test edx, edx
jne 0x41a668
cmp dword [0x4718e8], 1
jne 0x41a64c
push 0x80
push 0
lea eax, [ebp - 0x1fc]
push eax
call fcn.0041f6d0
add esp, 0xc
push str.initVideo_BindFilter_Failed_n
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.004208cb
add esp, 8
lea edx, [ebp - 0x1fc]
push edx
call fcn.00420840
add esp, 4
push eax
push 0x436eb4
lea eax, [ebp - 0x1fc]
push eax
call fcn.0040f6d0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00419da0
add esp, 4
mov edx, dword [ebp + 0xc]
mov dword [edx], 0xffffffff
xor eax, eax
jmp 0x41aef3
call fcn.00417aa0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x2d8], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x178], 0
lea edx, [ebp - 0x24]
push edx
push 2
push 0x98
mov eax, dword [ebp - 0x10]
push eax
call fcn.0041b0d0
add esp, 0x10
mov dword [ebp - 0x178], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x178], 0
jg 0x41a6c6
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov word [edx + 0x2dc], cx
jmp 0x41a6d4
mov eax, dword [ebp - 0x10]
mov cx, word [ebp - 0x24]
mov word [eax + 0x2dc], cx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + 0x2dc]
cmp eax, 0xffff
jne 0x41a6f1
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov word [edx + 0x2dc], cx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax + 0x2dc]
cmp ecx, 3
jg 0x41a70f
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1ec], 1
jmp 0x41a76d
lea eax, [ebp - 0x24]
push eax
push 1
push 0x8c
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.0041b0d0
add esp, 0x10
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jg 0x41a744
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1ec], 1
jmp 0x41a751
movzx eax, word [ebp - 0x24]
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x1ec], eax
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x1ec], 0xff
jne 0x41a76d
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x1ec], 1
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + 0x2dc]
cmp edx, 7
jl 0x41a7bd
lea eax, [ebp - 0x24]
push eax
push 1
push 0x59
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.0041b0d0
add esp, 0x10
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jg 0x41a7ae
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x2cc], 0
jmp 0x41a7bb
movzx eax, word [ebp - 0x24]
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x2cc], eax
jmp 0x41a7ca
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x2cc], 0
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax + 0x2dc]
cmp ecx, 8
jl 0x41a81b
lea edx, [ebp - 0x24]
push edx
push 1
push 0x9c
mov eax, dword [ebp - 0x10]
push eax
call fcn.0041b0d0
add esp, 0x10
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jg 0x41a80e
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x2c4], 0
jmp 0x41a81b
movzx edx, word [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x2c4], edx
lea ecx, [ebp - 0x24]
push ecx
push 2
push 0x9a
mov edx, dword [ebp - 0x10]
push edx
call fcn.0041b0d0
add esp, 0x10
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jg 0x41a850
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x2c8], 0
jmp 0x41a86f
movzx ecx, word [ebp - 0x24]
cmp ecx, 0xffff
jne 0x41a862
xor edx, edx
mov word [ebp - 0x24], dx
movzx eax, word [ebp - 0x24]
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x2c8], eax
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x2c8], 0
jne 0x41a893
cmp dword [0x94063c], 0
je 0x41a893
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x94063c]
mov dword [eax + 0x2c8], ecx
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x2c8], 0x407
jl 0x41a8ca
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x2c8], 0x7d0
jg 0x41a8ca
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x270], 2
mov dword [0x43fd44], 0x140
jmp 0x41a8d4
mov dword [0x43fd44], 0x280
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x10]
add edx, 0x148
push edx
push 0x1e
push 0
mov eax, dword [ebp - 0x10]
push eax
call fcn.0041c220
add esp, 0x10
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x110], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
cmp dword [0x4718e8], 1
jne 0x41a989
push 0x80
push 0
lea edx, [ebp - 0x1fc]
push edx
call fcn.0041f6d0
add esp, 0xc
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x270]
push ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0x110]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x2c8]
push edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax + 0x2dc]
push ecx
push str.initVideo_ReadEPPROM_Version_d__ReaderInternalModel_d__ParamsOk_d__libusbType_d_n
lea edx, [ebp - 0x1fc]
push edx
call fcn.004208cb
add esp, 0x18
lea eax, [ebp - 0x1fc]
push eax
call fcn.00420840
add esp, 4
push eax
push 0x436f20
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.0040f6d0
add esp, 0xc
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x110], 0
jle 0x41a9a3
mov eax, dword [ebp - 0x10]
push eax
call fcn.0041a020
add esp, 4
jmp 0x41a9ec
mov ecx, dword [0x94063c]
and ecx, 8
je 0x41a9bd
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1e0], 1
jmp 0x41a9ca
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x1e0], 0
cmp dword [ebp + 0xc], 0
je 0x41a9d9
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0xfffffffe
mov edx, dword [ebp - 0x10]
push edx
call fcn.00419da0
add esp, 4
xor eax, eax
jmp 0x41aef3
push 0x189c0
call fcn.0041ff76
add esp, 4
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x1b4], eax
push 0x4b000
call fcn.0041ff76
add esp, 4
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1ac], eax
push 0x4b000
push 0xc8
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1ac]
push ecx
call fcn.0041f6d0
add esp, 0xc
push 0x12c000
call fcn.0041ff76
add esp, 4
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1a0], eax
push 0x12c000
push 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1a0]
push ecx
call fcn.0041f6d0
add esp, 0xc
push 0x12c000
call fcn.0041ff76
add esp, 4
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1b0], eax
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x270], 0
je 0x41ab4a
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00419a50
add esp, 4
cmp dword [0x4718e8], 1
jne 0x41aaf6
push 0x80
push 0
lea edx, [ebp - 0x1fc]
push edx
call fcn.0041f6d0
add esp, 0xc
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x2d0]
push ecx
push 0x436f34
lea edx, [ebp - 0x1fc]
push edx
call fcn.004208cb
add esp, 0xc
lea eax, [ebp - 0x1fc]
push eax
call fcn.00420840
add esp, 4
push eax
push 0x436f54
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.0040f6d0
add esp, 0xc
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x2d0], 0
je 0x41ab42
mov dword [ebp - 0x20], 0xff05ff
mov eax, dword [ebp - 0x20]
push eax
push 0x3ee
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.0041bb30
add esp, 0xc
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x20], 0xff0500
mov edx, dword [ebp - 0x20]
push edx
push 0x3ee
mov eax, dword [ebp - 0x10]
push eax
call fcn.0041bb30
add esp, 0xc
mov eax, dword [ebp - 0x10]
jmp 0x41aef3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.004180e0
add esp, 4
movzx edx, al
test edx, edx
jne 0x41abd0
cmp dword [0x4718e8], 1
jne 0x41abbd
push 0x80
push 0
lea eax, [ebp - 0x1fc]
push eax
call fcn.0041f6d0
add esp, 0xc
push str.initVideo_InitCaptureGraphBuilder_Failed_n
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.004208cb
add esp, 8
lea edx, [ebp - 0x1fc]
push edx
call fcn.00420840
add esp, 4
push eax
push 0x436f94
lea eax, [ebp - 0x1fc]
push eax
call fcn.0040f6d0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00419da0
add esp, 4
xor eax, eax
jmp 0x41aef3
mov edx, dword [0x43fd48]
push edx
mov eax, dword [0x43fd44]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00418430
add esp, 0xc
movzx edx, al
test edx, edx
jne 0x41ac5a
cmp dword [0x4718e8], 1
jne 0x41ac47
push 0x80
push 0
lea eax, [ebp - 0x1fc]
push eax
call fcn.0041f6d0
add esp, 0xc
push str.initVideo_SetMediaFormat_Failed_n
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.004208cb
add esp, 8
lea edx, [ebp - 0x1fc]
push edx
call fcn.00420840
add esp, 4
push eax
push 0x436fcc
lea eax, [ebp - 0x1fc]
push eax
call fcn.0040f6d0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00419da0
add esp, 4
xor eax, eax
jmp 0x41aef3
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xc]
push eax
push 0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x14]
push edx
push 0x437250
push 0x4371c0
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov ecx, dword [ecx]
push eax
mov edx, dword [ecx + 0x1c]
call edx
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jge 0x41ad08
cmp dword [0x4718e8], 1
jne 0x41acf5
push 0x80
push 0
lea eax, [ebp - 0x1fc]
push eax
call fcn.0041f6d0
add esp, 0xc
mov ecx, dword [ebp - 0x200]
push ecx
push str.initVideo_RenderStream_Failed_x_n
lea edx, [ebp - 0x1fc]
push edx
call fcn.004208cb
add esp, 0xc
lea eax, [ebp - 0x1fc]
push eax
call fcn.00420840
add esp, 4
push eax
push 0x437004
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.0040f6d0
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
call fcn.00419da0
add esp, 4
xor eax, eax
jmp 0x41aef3
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x26c], 1
jne 0x41ad22
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00419350
add esp, 4
jmp 0x41ad2e
mov edx, dword [ebp - 0x10]
push edx
call fcn.004189c0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x174]
push ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0x10]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x10]
mov eax, dword [eax]
push edx
mov ecx, dword [eax + 0x14]
call ecx
mov edx, dword [ebp - 0x130]
mov dword [ebp - 0x18], edx
push 0x28
push 0
mov eax, dword [ebp - 0x10]
add eax, 0x1b8
push eax
call fcn.0041f6d0
add esp, 0xc
push 0x28
mov ecx, dword [ebp - 0x18]
add ecx, 0x30
push ecx
mov edx, dword [ebp - 0x10]
add edx, 0x1b8
push edx
call fcn.0041f350
add esp, 0xc
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1cc]
push ecx
call fcn.0041ff76
add esp, 4
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x19c], eax
push 0x12c000
call fcn.0041ff76
add esp, 4
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x1a4], eax
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x19c], 0
jne 0x41ade2
mov eax, dword [ebp - 0x10]
push eax
call fcn.00419da0
add esp, 4
xor eax, eax
jmp 0x41aef3
push 1
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x10]
mov edx, dword [edx]
push ecx
mov eax, dword [edx + 0x18]
call eax
push 0x38
call fcn.00420a17
add esp, 4
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
je 0x41ae24
mov ecx, dword [ebp - 0x214]
call fcn.0041c950
mov dword [ebp - 0x220], eax
jmp 0x41ae2e
mov dword [ebp - 0x220], 0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x220]
mov dword [ecx + 0x18], edx
cmp dword [0x4718e8], 1
jne 0x41ae9b
push 0x80
push 0
lea eax, [ebp - 0x1fc]
push eax
call fcn.0041f6d0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x2d0]
push edx
push str.initVideo_SupportAuxDevice_d_n
lea eax, [ebp - 0x1fc]
push eax
call fcn.004208cb
add esp, 0xc
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.00420840
add esp, 4
push eax
push str.c:ZKFingerLog.txt
lea edx, [ebp - 0x1fc]
push edx
call fcn.0040f6d0
add esp, 0xc
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x2d0], 0
je 0x41aee7
mov dword [ebp - 0x20], 0xff05ff
mov ecx, dword [ebp - 0x20]
push ecx
push 0x3ee
mov edx, dword [ebp - 0x10]
push edx
call fcn.0041bb30
add esp, 0xc
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x20], 0xff0500
mov eax, dword [ebp - 0x20]
push eax
push 0x3ee
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.0041bb30
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x28]
xor ecx, ebp
call fcn.0041f6b5
mov esp, ebp
pop ebp
ret