Function at 0x48b3f4
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xc
push 0
push 0
dec ecx
jne 0x48b3fc
push esi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x48b7cb
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049e654
mov eax, dword [ebp - 4]
cmp byte [eax + 0x268], 0
je 0x48b781
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x276]
sub al, 2
jae 0x48b45d
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 4]
call fcn.00497254
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 4]
add eax, 0x270
call fcn.00404b14
jmp 0x48b48d
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x26c]
cmp eax, 0x1f4
jb 0x48b47f
mov eax, dword [ebp - 4]
add eax, 0x270
call fcn.00404ac0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 4]
mov dword [edx + 0x26c], eax
mov eax, dword [ebp - 8]
mov al, byte [eax]
sub al, 8
je 0x48b4d6
dec al
je 0x48b4a7
sub al, 0x12
jne 0x48b65d
jmp 0x48b781
mov eax, dword [ebp - 4]
cmp byte [eax + 0x269], 0
je 0x48b781
mov eax, dword [ebp - 4]
call fcn.00489ea4
test al, al
je 0x48b781
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00489ed4
jmp 0x48b781
push ebp
lea edx, [ebp - 0x10]
lea eax, [ebp - 0xc]
call fcn.0048b2ec
pop ecx
test al, al
je 0x48b4f3
push ebp
call fcn.0048b32c
pop ecx
jmp 0x48b646
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x276]
sub al, 2
jae 0x48b602
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 4]
call fcn.00497254
mov eax, dword [ebp - 0x40]
call fcn.00404d80
test eax, eax
jle 0x48b602
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.00497254
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
jmp 0x48b535
dec dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.0040f49c
cmp al, 2
je 0x48b532
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x1c]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.00404fe0
push 0
push 0xffffffffffffffff
push 0x14e
mov eax, dword [ebp - 4]
call fcn.0049fc6c
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x48]
push eax
mov edx, dword [ebp - 0x10]
inc edx
mov ecx, 0x7fffffff
mov eax, dword [ebp - 0x18]
call fcn.00404fe0
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x14]
call fcn.00404dcc
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 4]
call fcn.00497294
mov dx, word [ebp - 0x1c]
dec edx
mov ax, word [ebp - 0x1c]
dec eax
call fcn.004082f8
push eax
push 0
push 0x142
mov eax, dword [ebp - 4]
call fcn.0049fc6c
push eax
call sub.user32.dll_SendMessageA
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.00497254
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
add eax, 0x270
call fcn.00404b14
jmp 0x48b646
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
call fcn.00404d80
mov edx, eax
mov eax, dword [ebp - 4]
add eax, 0x270
mov ecx, 1
call fcn.00405020
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
call fcn.00404d80
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
call fcn.0040f49c
cmp al, 2
je 0x48b5e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
call fcn.00404d80
mov edx, eax
mov eax, dword [ebp - 4]
add eax, 0x270
mov ecx, 1
call fcn.00405020
mov eax, dword [ebp - 8]
mov byte [eax], 0
mov eax, dword [ebp - 4]
mov si, 0xffb3
call fcn.00403d98
jmp 0x48b781
mov eax, dword [ebp - 4]
cmp byte [eax + 0x269], 0
je 0x48b67f
mov eax, dword [ebp - 4]
call fcn.00489ea4
test al, al
jne 0x48b67f
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.00489ed4
push ebp
lea edx, [ebp - 0x10]
lea eax, [ebp - 0xc]
call fcn.0048b2ec
pop ecx
test al, al
je 0x48b6c9
lea eax, [ebp - 0x50]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
mov ecx, dword [ebp - 0xc]
mov edx, 1
call fcn.00404fe0
mov eax, dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 8]
mov dl, byte [edx]
call fcn.00404ca8
mov ecx, dword [ebp - 0x54]
lea eax, [ebp - 0x18]
pop edx
call fcn.00404dcc
jmp 0x48b6ea
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 8]
mov dl, byte [edx]
call fcn.00404ca8
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x270]
lea eax, [ebp - 0x18]
call fcn.00404dcc
mov eax, dword [ebp - 8]
mov al, byte [eax]
mov edx, dword [0x5f2788]
and eax, 0xff
bt dword [edx], eax
jae 0x48b76c
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.0049fc6c
push eax
lea eax, [ebp - 0x38]
push eax
call sub.user32.dll_PeekMessageA
test eax, eax
je 0x48b781
cmp dword [ebp - 0x34], 0x102
jne 0x48b781
lea eax, [ebp - 0x60]
mov dl, byte [ebp - 0x30]
call fcn.00404ca8
mov ecx, dword [ebp - 0x60]
lea eax, [ebp - 0x5c]
mov edx, dword [ebp - 0x18]
call fcn.00404dcc
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 4]
call fcn.0048b7d8
test al, al
je 0x48b781
push 1
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.0049fc6c
push eax
lea eax, [ebp - 0x38]
push eax
call sub.user32.dll_PeekMessageA
mov eax, dword [ebp - 8]
mov byte [eax], 0
jmp 0x48b781
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.0048b7d8
test al, al
je 0x48b781
mov eax, dword [ebp - 8]
mov byte [eax], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48b7d2
lea eax, [ebp - 0x60]
mov edx, 5
call fcn.00404ae4
lea eax, [ebp - 0x4c]
call fcn.00404ac0
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00404ae4
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.00404ae4
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00404ae4
ret