Function at 0x4d8144
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd0
push esi
push edi
mov esi, edx
lea edi, [ebp - 0x2c]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 4], eax
lea eax, [ebp - 0x2c]
mov edx, dword [0x47378c]
call fcn.00405e80
xor eax, eax
push ebp
push 0x4d860e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x244], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x248], eax
cmp dword [ebp - 0x2c], 0x1b
jne 0x4d81a9
mov eax, dword [ebp - 4]
mov byte [eax + 0x2c], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x2d], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2c], 0
jne 0x4d859f
mov eax, dword [ebp - 0x2c]
cmp eax, 0x14
jg 0x4d81d3
je 0x4d81df
add eax, 0xfffffffa
sub eax, 2
jb 0x4d81df
dec eax
sub eax, 3
jb 0x4d81df
dec eax
je 0x4d81df
jmp 0x4d8210
sub eax, 0x1b
je 0x4d81df
sub eax, 0x1377
jne 0x4d8210
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x20], eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 4]
mov dword [edx + 0x28], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x28], 2
je 0x4d8206
mov eax, dword [ebp - 4]
mov byte [eax + 0x160], 1
jmp 0x4d8210
mov eax, dword [ebp - 4]
mov byte [eax + 0x160], 0
cmp dword [ebp - 0x2c], 0x17
jne 0x4d821b
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
cmp eax, dword [ebp - 4]
jne 0x4d849f
cmp dword [ebp - 0x2c], 0xbc3
jne 0x4d824e
mov eax, dword [0x4e9280]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.004ce83c
test al, al
je 0x4d85f2
cmp dword [ebp - 0x2c], 0xbc5
jne 0x4d8287
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [0x4e9280]
mov eax, dword [eax]
call fcn.004ce674
test al, al
je 0x4d85f2
cmp dword [ebp - 0x2c], 0xbdb
jne 0x4d82c0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [0x4e9280]
mov eax, dword [eax]
call fcn.004ce674
test al, al
je 0x4d85f2
mov eax, dword [ebp - 0x2c]
add eax, 0xfffff443
cmp eax, 0x21
ja case.0x4d82d7.3005
mov al, byte [eax + 0x4d82de]
jmp dword [eax*4 + 0x4d8300]
mov eax, dword [ebp - 4]
add eax, 0x254
lea edx, [ebp - 0x2c]
mov ecx, dword [0x47378c]
call fcn.00405fa0
sub dword [ebp - 0x2c], 0xbb8
jmp case.0x4d82d7.3005
mov eax, dword [ebp - 4]
add eax, 0x254
lea edx, [ebp - 0x2c]
mov ecx, dword [0x47378c]
call fcn.00405fa0
mov dword [ebp - 0x2c], 0x1392
jmp case.0x4d82d7.3005
mov eax, dword [ebp - 4]
cmp dword [eax + 0x20], 0
je 0x4d839e
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xec], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0xf0], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [edx + 0xf4], eax
mov eax, dword [ebp - 4]
add eax, 0x254
lea edx, [ebp - 0x2c]
mov ecx, dword [0x47378c]
call fcn.00405fa0
mov dword [ebp - 0x2c], 0xfe2d
jmp case.0x4d82d7.3005
mov eax, dword [ebp - 4]
add eax, 0x254
lea edx, [ebp - 0x2c]
mov ecx, dword [0x47378c]
call fcn.00405fa0
mov dword [ebp - 0x2c], 8
jmp case.0x4d82d7.3005
mov eax, dword [ebp - 4]
add eax, 0x254
lea edx, [ebp - 0x2c]
mov ecx, dword [0x47378c]
call fcn.00405fa0
mov dword [ebp - 0x2c], 0x19
jmp case.0x4d82d7.3005
mov eax, dword [ebp - 4]
add eax, 0x254
lea edx, [ebp - 0x2c]
mov ecx, dword [0x47378c]
call fcn.00405fa0
mov dword [ebp - 0x2c], 0x1a
jmp case.0x4d82d7.3005
mov eax, dword [ebp - 4]
add eax, 0x254
lea edx, [ebp - 0x2c]
mov ecx, dword [0x47378c]
call fcn.00405fa0
mov dword [ebp - 0x2c], 0x24
jmp case.0x4d82d7.3005
mov eax, dword [ebp - 4]
add eax, 0x254
lea edx, [ebp - 0x2c]
mov ecx, dword [0x47378c]
call fcn.00405fa0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [edx + 0x260], eax
sub dword [ebp - 0x2c], 0xbb8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x238], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x23c], eax
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x10]
mov edx, dword [ebp - 4]
mov dword [edx + 0x240], eax
mov eax, dword [ebp - 0x2c]
sub eax, 0x11
je 0x4d850c
sub eax, 0xe
jne 0x4d856a
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 4]
mov dword [edx + 0x1a0], eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x3c]
lea eax, [eax + eax*4]
mov edx, 0xc8
sub edx, eax
mov dword [ebp - 0x30], edx
fild dword [ebp - 0x30]
call fcn.004033d0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x50
jle 0x4d84ef
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x218], eax
jmp 0x4d84fc
mov eax, dword [ebp - 4]
mov dword [eax + 0x218], 0x50
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 4]
mov dword [edx + 0x194], eax
jmp 0x4d8585
mov al, byte [ebp - 0x20]
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x4d8585
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov esi, eax
lea edi, [edx + 0x138]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 4]
mov dword [eax + 0x138], 0xffffffff
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 4]
mov dword [edx + 0x14c], eax
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 4]
mov dword [edx + 0x150], eax
mov edx, 0x24
mov eax, dword [ebp - 0xc]
call fcn.00402efc
jmp 0x4d8585
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 4]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 4]
mov dword [edx + 0xc], eax
mov al, byte [ebp - 0x20]
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 4]
mov dword [edx + 0x174], eax
mov eax, dword [ebp - 4]
mov si, 0xffff
call fcn.004043e8
jmp 0x4d85c4
cmp dword [ebp - 0x2c], 0x21
jne 0x4d85c4
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 4]
mov dword [edx + 0x174], eax
mov eax, dword [ebp - 4]
mov si, 0xffff
call fcn.004043e8
mov eax, dword [ebp - 4]
mov byte [eax + 0x2d], 1
cmp dword [ebp - 0x2c], 0x20
je 0x4d85d0
cmp dword [ebp - 0x2c], 0x22
jne 0x4d85e6
mov eax, dword [ebp - 4]
mov byte [eax + 0x2c], 1
mov eax, dword [0x4e9280]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.004cf30c
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.004043e8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d8615
lea eax, [ebp - 0x2c]
mov edx, dword [0x47378c]
call fcn.00405d3c
ret