Function at 0x4fe01c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], eax
mov ecx, 7
lea eax, [ebp - 0x20]
mov edx, dword [0x4010ac]
call fcn.004071ec
xor eax, eax
push ebp
push 0x4fe954
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x50d17c], 0
je 0x4fe06d
xor eax, eax
call fcn.004e1a7c
mov byte [ebp - 0x21], 0
mov eax, dword [0x505d80]
mov eax, dword [eax]
shr eax, 0x10
cmp eax, 0x600
mov eax, dword [0x5059dc]
setae byte [eax]
xor edx, edx
push ebp
push 0x4fe895
push dword fs:[edx]
mov dword fs:[edx], esp
cmp dword [0x50d18c], 0
je 0x4fe0ab
mov dl, 1
mov eax, dword [0x50d18c]
call fcn.004b23c8
cmp byte [0x50d17a], 0
je 0x4fe118
xor eax, eax
push ebp
push 0x4fe0eb
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x50d180], 0
jne 0x4fe0d7
mov eax, 0x4fe970
call fcn.004b2eb0
jmp 0x4fe0e1
mov eax, dword [0x50d180]
call fcn.004b3094
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fe118
mov eax, 0x4fe9d8
call fcn.004b30f0
lea eax, [ebp - 0x2c]
mov ecx, dword [0x50d164]
mov edx, 0x4fea3c
call fcn.00406914
mov eax, dword [ebp - 0x2c]
call fcn.004b30f0
lea eax, [ebp - 0x30]
mov ecx, dword [0x50d168]
mov edx, 0x4fea7c
call fcn.00406914
mov eax, dword [ebp - 0x30]
call fcn.004b30f0
lea eax, [ebp - 0x38]
call fcn.0047f358
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x34]
mov edx, 0x4feaa8
call fcn.00406914
mov eax, dword [ebp - 0x34]
call fcn.004b30f0
call fcn.004e1b44
xor eax, eax
call fcn.004fd948
mov dword [0x50d170], eax
mov dl, 1
mov eax, dword [0x4fcc70]
call fcn.004b5fac
mov dword [0x50598c], eax
mov ecx, dword [0x50d168]
mov edx, dword [0x50d170]
mov eax, dword [0x50598c]
call fcn.004b8bd0
lea ecx, [ebp - 0x3c]
mov eax, dword [0x50598c]
mov edx, dword [eax + 0x18]
mov al, 0xb7
call fcn.004ac064
mov edx, dword [ebp - 0x3c]
mov eax, 0x50d174
call fcn.00406448
mov eax, dword [0x50598c]
test byte [eax + 0x1d], 0x20
je 0x4fe213
mov eax, dword [0x505abc]
cmp byte [eax], 0
jne 0x4fe213
push 1
push 1
mov eax, dword [0x50d174]
call fcn.004064d4
push eax
mov eax, dword [0x505e5c]
mov eax, dword [eax + 0x2fc]
call fcn.004064d4
mov ecx, 0x30
pop edx
call fcn.004e242c
call fcn.0041198c
mov eax, dword [0x50598c]
test byte [eax + 0x1d], 1
je 0x4fe256
call fcn.00480408
test al, al
jne 0x4fe256
push 1
push 1
mov eax, dword [0x50d174]
call fcn.004064d4
push eax
mov eax, dword [0x505e5c]
mov eax, dword [eax + 0x1dc]
call fcn.004064d4
mov ecx, 0x30
pop edx
call fcn.004e242c
call fcn.0041198c
mov eax, dword [0x50d170]
xor edx, edx
mov dword [0x50d170], edx
call fcn.00404098
mov al, 2
call fcn.004fd948
mov dword [0x50d170], eax
lea eax, [ebp - 0x20]
push eax
push 6
mov ecx, 0x85060000
mov dx, 0x20
mov eax, dword [0x50598c]
call fcn.004b6478
test al, al
jne 0x4fe29b
mov eax, 0x4feae8
call fcn.004ae008
cmp dword [0x50d18c], 0
je 0x4fe2b6
lea eax, [ebp - 4]
mov edx, dword [0x505d2c]
mov edx, dword [edx]
call fcn.0040532c
jmp 0x4fe2c1
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x20]
call fcn.004fdfbc
mov eax, dword [0x50598c]
cmp byte [eax + 0x10], 0
je 0x4fe2e9
mov eax, dword [0x505abc]
cmp byte [eax], 0
jne 0x4fe2e0
mov eax, 0x4feb80
call fcn.004ae008
mov al, 1
call fcn.004e291c
jmp 0x4fe2f0
xor eax, eax
call fcn.004e291c
call fcn.004dfc34
cmp dword [ebp - 4], 0
je 0x4fe3f8
call fcn.004df610
call fcn.004dff6c
mov eax, dword [0x5059ec]
mov edx, dword [0x50d164]
call fcn.00406448
mov eax, dword [0x505dc0]
mov edx, dword [0x50598c]
mov edx, dword [edx + 0x14]
call fcn.00406448
movzx eax, byte [0x50d17b]
or al, byte [0x50d17c]
mov edx, dword [0x505b48]
mov byte [edx], al
mov eax, dword [0x505fb8]
mov edx, dword [ebp - 0x18]
call fcn.00406448
mov eax, dword [0x505c74]
mov edx, dword [ebp - 0x14]
call fcn.00406448
mov eax, dword [0x505ad4]
mov edx, dword [ebp - 0x10]
call fcn.00406448
mov eax, dword [0x505b74]
mov edx, dword [ebp - 0xc]
call fcn.00406448
mov eax, dword [ebp - 8]
test eax, eax
je 0x4fe381
sub eax, 4
mov eax, dword [eax]
mov edx, eax
add edx, edx
mov eax, dword [ebp - 8]
call fcn.004fdf04
mov dl, 1
mov eax, dword [0x4fac7c]
call fcn.004fb494
mov edx, dword [0x505b98]
mov dword [edx], eax
mov eax, 0x4e151c
mov edx, dword [0x505b98]
mov edx, dword [edx]
mov dword [edx + 0xc], eax
mov eax, 0x4e1734
mov edx, dword [0x505b98]
mov edx, dword [edx]
mov dword [edx + 0x10], eax
mov eax, 0x4e1740
mov edx, dword [0x505b98]
mov edx, dword [edx]
mov dword [edx + 0x14], eax
mov eax, 0x4e174c
mov edx, dword [0x505b98]
mov edx, dword [edx]
mov dword [edx + 0x18], eax
mov ecx, dword [0x505c38]
mov ecx, dword [ecx]
mov eax, dword [0x505b98]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.004fb58c
xor edx, edx
push ebp
push 0x4fe841
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x4fe774
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x505b98]
cmp dword [eax], 0
je 0x4fe487
xor edx, edx
push ebp
push 0x4fe45b
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
push 0
push 1
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x505b98]
mov eax, dword [eax]
mov edx, 0x4fec14
call fcn.004fb748
pop dword fs:[0]
add esp, 8
jmp 0x4fe474
test al, al
jne 0x4fe487
mov eax, 0x4feca4
call fcn.004b30f0
call fcn.0041198c
cmp byte [0x50d17b], 0
jne 0x4fe4c1
cmp byte [0x50d17c], 0
jne 0x4fe4c1
push 0x124
push 1
push 6
mov eax, dword [0x50598c]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x50d174]
mov al, 0x27
call fcn.004fd054
cmp eax, 6
je 0x4fe4c1
call fcn.0041198c
xor edx, edx
xor eax, eax
call fcn.004fd7bc
jmp 0x4fe4ef
push 0x31
push 1
push 2
mov eax, dword [0x50598c]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x50d174]
mov al, 0xbd
call fcn.004fd054
dec eax
je 0x4fe4ef
call fcn.0041198c
mov eax, dword [0x50598c]
call fcn.004b64cc
test al, al
jne 0x4fe4cc
jmp 0x4fe512
push 0xa
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x505e4c]
mov eax, dword [eax]
call fcn.0047c440
mov eax, dword [0x506034]
cmp byte [eax], 0
jne 0x4fe4ff
mov eax, dword [0x5059dc]
mov byte [eax], 0
lea ecx, [ebp - 0x48]
mov eax, dword [0x50598c]
mov edx, dword [eax + 0x18]
mov al, 0xa7
call fcn.004ac064
mov edx, dword [ebp - 0x48]
mov eax, dword [0x505e4c]
mov eax, dword [eax]
mov eax, dword [eax + 0x170]
call fcn.00480c5c
call fcn.004fce98
xor edx, edx
mov al, 1
call fcn.004fd7bc
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 0x28], eax
mov eax, dword [0x50598c]
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x24], edx
mov ecx, 0x4fd2d8
mov dl, 1
mov eax, dword [0x50598c]
call fcn.004b729c
mov byte [ebp - 0x22], al
movzx eax, byte [ebp - 0x22]
mov edx, dword [0x505d74]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea edx, [ebp - 0x44]
xor ecx, ecx
mov eax, 0x4fed0c
call fcn.004b3374
mov eax, dword [0x50598c]
cmp byte [eax + 0x1c], 0
jne 0x4fe5bd
mov eax, dword [0x50598c]
test byte [eax + 0x1d], 8
jne 0x4fe5bd
xor eax, eax
jmp 0x4fe5bf
mov al, 1
mov byte [ebp - 0x23], al
mov eax, dword [0x505b98]
cmp dword [eax], 0
je 0x4fe65d
mov eax, dword [0x505b98]
mov eax, dword [eax]
mov edx, 0x4fed38
call fcn.004fb638
test al, al
je 0x4fe65d
cmp byte [ebp - 0x23], 0
jne 0x4fe653
xor eax, eax
push ebp
push 0x4fe638
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 0
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x505b98]
mov eax, dword [eax]
mov edx, 0x4fed38
call fcn.004fb748
test al, al
je 0x4fe62e
mov byte [ebp - 0x23], 1
mov eax, 0x4fed5c
call fcn.004b30f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fe65d
mov eax, 0x4fee3c
call fcn.004b30f0
movzx eax, byte [ebp - 0x23]
mov edx, dword [0x505d74]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea edx, [ebp - 0x44]
xor ecx, ecx
mov eax, 0x4feef4
call fcn.004b3374
cmp byte [0x50d17c], 0
jne 0x4fe6b8
mov eax, dword [0x505e4c]
mov eax, dword [eax]
call fcn.0047c440
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [ebp - 0x28]
cmp eax, 0x3e8
jae 0x4fe6b8
push 0xff
push 0xa
push 0
push 0
push 0
call sub.user32.dll_MsgWaitForMultipleObjects
jmp 0x4fe689
mov eax, dword [0x505ae8]
mov eax, dword [eax]
mov edx, dword [0x505ae8]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00404098
mov dl, 1
mov al, 2
call fcn.004fd7bc
cmp byte [ebp - 0x23], 0
jne 0x4fe718
cmp byte [0x50d17b], 0
jne 0x4fe761
cmp byte [0x50d17c], 0
jne 0x4fe761
push 0x10040
push 1
push 1
mov eax, dword [0x50598c]
mov edx, dword [eax + 0x18]
movzx eax, byte [ebp - 0x22]
movzx eax, byte [eax + 0x505998]
mov ecx, dword [0x50d174]
call fcn.004fd054
jmp 0x4fe761
cmp byte [0x50d17d], 0
jne 0x4fe751
cmp byte [0x50d17c], 0
jne 0x4fe74d
push 0x10024
push 1
push 6
mov eax, dword [0x50598c]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x50d174]
mov al, 0xbb
call fcn.004fd054
cmp eax, 6
jne 0x4fe751
mov byte [ebp - 0x21], 1
cmp byte [ebp - 0x21], 0
jne 0x4fe761
mov eax, 0x4fef38
call fcn.004b30f0
mov dl, 1
mov al, 3
call fcn.004fd7bc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fe788
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4fe84b
xor edx, edx
push ebp
push 0x4fe7c3
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x505ae8]
mov eax, dword [eax]
mov edx, dword [0x505ae8]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00404098
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fe7d2
mov eax, dword [0x505b98]
cmp dword [eax], 0
je 0x4fe82e
xor eax, eax
push ebp
push 0x4fe815
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x505b98]
mov eax, dword [eax]
mov edx, 0x4fef94
call fcn.004fb694
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fe82e
mov eax, dword [0x505e4c]
mov eax, dword [eax]
mov eax, dword [eax + 0x170]
call fcn.00480cec
ret