Function at 0x4226d0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x463551
mov eax, dword fs:[0]
push eax
mov eax, 0x8528
call fcn.00457740
mov eax, dword [0x474860]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
mov edi, ecx
mov dword [ebp - 0x84f8], edi
mov dword [ebp - 4], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp eax, 1
ja 0x422735
ljmp 0x1da1:0x4f8765cd
lea ecx, [ebp - 0x84f4]
call fcn.00425c10
lea ecx, [ebp - 0x84f4]
call int.00422320
call fcn.004318f0
mov edx, eax
mov dword [ebp - 0x58], 0xf
mov dword [ebp - 0x5c], 0
mov byte [ebp - 0x6c], 0
cmp byte [edx], 0
jne 0x42276d
xor ecx, ecx
jmp 0x422781
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x422772
sub ecx, edi
mov edi, dword [ebp - 0x84f8]
push ecx
push edx
lea ecx, [ebp - 0x6c]
xchg esp, eax
call fcn.0040dbb0
mov byte [ebp - 4], 1
call esi
cmp eax, 4
ja 0x4227c9
in eax, 0xe1
push es
cmp ah, bl
mov dword [edi + 0x4b], esp
push ebx
xchg ebp, eax
jno 0x422785
test al, 0x79
pop ecx
mov dl, 0xe8
imul byte [eax + 0x2e]
mov ebx, 0xc27eabe4
xor bl, ch
xchg edi, eax
sub dword [ecx], esp
fbld tbyte [ebp - 0x535e2080]
invalid
ret 0xeb30
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x6c]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.0040da80
push 0
mov edx, ebx
mov ecx, edi
call fcn.00443ba0
add esp, 0x1c
call esi
cmp eax, 9
ja 0x422866
jl 0x4227ae
mov word [ecx - 0x4a], ss
cdq
sub byte [esi - 0x781d14c7], al
ljmp 0x3a4c
call fcn.00431990
mov edx, eax
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], 0
mov byte [ebp - 0x54], 0
cmp byte [edx], 0
jne 0x422888
xor ecx, ecx
jmp 0x422899
mov ecx, edx
lea edi, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x422890
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x54]
call fcn.0040dbb0
mov byte [ebp - 4], 2
call esi
cmp eax, 5
ja 0x4228eb
push esp
bnd call dword ss:[ebx]
invalid
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x28], 0xf
mov dword [ebp - 0x2c], 0
mov byte [ebp - 0x3c], 0
call fcn.0040da80
mov byte [ebp - 4], 3
call esi
test eax, eax
jne 0x42292c
lcall 0x62cc, 0x83e35ff5
jnp 0x422932
push esi
popal
out dx, al
lodsb al, byte [esi]
idiv byte [ecx + ebp*8 + 0x16]
call 0x8dc1ca7f
lea ecx, [ebx + edi*2]
invalid
lea ecx, [ebp - 0x84f4]
call fcn.00424bc0
mov edi, eax
call esi
cmp eax, 5
ja 0x42297d
xor ah, byte [ecx]
push 0xffffffffffffffc1
fsubr dword [esi]
xchg ah, ah
push eax
push 0x4835e33a
daa
mov bl, 0x40
sti
fadd dword [edx + 0x3d98c373]
xchg edi, eax
wait
xchg byte [ecx + ebp*8 + 0x1a], dl
jmp 0x422921
push edi
lea eax, [ebp - 0x24]
xorps xmm0, xmm0
push str.:_04X
push eax
mov byte [ebp - 0x24], 0
movq qword [ebp - 0x23], xmm0
mov dword [ebp - 0x1b], 0
mov word [ebp - 0x17], 0
mov byte [ebp - 0x15], 0
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x852c]
push 5
push str.:FFFF
mov dword [ebp - 0x8518], 0xf
mov dword [ebp - 0x851c], 0
mov byte [ebp - 0x852c], 0
call fcn.0040dbb0
mov byte [ebp - 4], 4
cmp byte [ebp - 0x24], 0
mov dword [ebp - 0x8500], 0xf
mov dword [ebp - 0x8504], 0
mov byte [ebp - 0x8514], 0
jne 0x422a03
xor ecx, ecx
jmp 0x422a19
lea ecx, [ebp - 0x24]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x422a10
sub ecx, edx
push ecx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x8514]
call fcn.0040dbb0
lea eax, [ebp - 0x8514]
push eax
lea edx, [ebp - 0x852c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 5
call fcn.004259d0
add esp, 4
cmp dword [ebp - 0x8500], 0x10
jb 0x422a5c
push dword [ebp - 0x8514]
call fcn.00447bb4
add esp, 4
mov byte [ebp - 4], 3
cmp dword [ebp - 0x8518], 0x10
mov dword [ebp - 0x8500], 0xf
mov dword [ebp - 0x8504], 0
mov byte [ebp - 0x8514], 0
jb 0x422a92
push dword [ebp - 0x852c]
call fcn.00447bb4
add esp, 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x84fc], esp
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x3c]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.0040da80
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
mov byte [ebp - 4], 6
push 0
lea eax, [ebp - 0x54]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.0040da80
mov edi, dword [ebp - 0x84f8]
push 0
mov edx, ebx
mov ecx, edi
mov byte [ebp - 4], 3
call fcn.00443a00
add esp, 0x34
call esi
cmp eax, 4
ja 0x422b34
hlt
lodsd eax, dword [esi]
loopne 0x422b39
int3
cmp dword [ebp + 0x20], 8
mov eax, dword [ebp + 8]
lea ecx, [ebp + 0xc]
cmovae ecx, dword [ebp + 0xc]
sub esp, 0x14
sub ebx, eax
push eax
push ebx
inc ebp
or byte [ebp + 0x430f0c4d], cl
dec ebp
or al, 0x83
in al, dx
adc al, 0x2b
fcom dword [eax + 0x53]
push edi
call fcn.00424b00
add esp, 0x20
mov bl, al
call esi
test eax, eax
jne 0x422b6f
sbb esi, eax
jb 0x422b25
push 0xffffffffffffff8f
mov esp, 0x925d2198
out 2, al
xchg esp, eax
lahf
jecxz 0x422b44
out 0x66, al
wait
cmp dword [ebp - 0x28], 0x10
jb 0x422b80
push dword [ebp - 0x3c]
call fcn.00447bb4
add esp, 4
cmp dword [ebp - 0x40], 0x10
mov dword [ebp - 0x28], 0xf
mov dword [ebp - 0x2c], 0
mov byte [ebp - 0x3c], 0
jb 0x422ba3
push dword [ebp - 0x54]
call fcn.00447bb4
add esp, 4
cmp dword [ebp - 0x58], 0x10
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], 0
mov byte [ebp - 0x54], 0
jb 0x422bc6
push dword [ebp - 0x6c]
call fcn.00447bb4
add esp, 4
cmp dword [ebp + 0x20], 8
mov dword [ebp - 0x58], 0xf
mov dword [ebp - 0x5c], 0
mov byte [ebp - 0x6c], 0
jb 0x422be9
push dword [ebp + 0xc]
call fcn.00447bb4
add esp, 4
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00447bb9
mov esp, ebp
pop ebp
ret