Function at 0x4f9000
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x57a18c
mov eax, dword fs:[0]
push eax
sub esp, 0x748
mov eax, dword [0x5c5678]
xor eax, esp
mov dword [esp + 0x740], eax
push ebx
push esi
push edi
mov eax, dword [0x5c5678]
xor eax, esp
push eax
lea eax, [esp + 0x758]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov dword [esp + 0x10], 0
cmp dword [ebx + 0x3ec], 0
jne 0x4f90a6
mov eax, dword [ebx + 0x438]
test eax, eax
je 0x4f906e
movzx ecx, byte [ebx + 0x486]
push 0
push ecx
push eax
call fcn.004e0cf0
mov eax, dword [ebx + 0x448]
test eax, eax
je 0x4f907e
push eax
call fcn.004dcb90
mov ecx, dword [ebx + 0x440]
test ecx, ecx
je 0x4f908d
call fcn.00520100
mov ebx, dword [ebx + 0x444]
test ebx, ebx
je 0x4f909f
push 0
push ebx
call fcn.00522020
xor al, al
jmp 0x4f9835
mov edi, 8
cmp dword [ebx + 0x424], edi
jb 0x4f90bb
mov ecx, dword [ebx + 0x410]
jmp 0x4f90c1
lea ecx, [ebx + 0x410]
mov eax, dword [ebx + 0x438]
test eax, eax
je 0x4f90da
movzx edx, byte [ebx + 0x486]
push ecx
push edx
push eax
call fcn.004e0cf0
mov eax, dword [ebx + 0x448]
test eax, eax
je 0x4f90ea
push eax
call fcn.004dcb90
mov ecx, dword [ebx + 0x440]
test ecx, ecx
je 0x4f90f9
call fcn.00520100
cmp dword [ebx + 0x424], edi
jb 0x4f9109
mov ecx, dword [ebx + 0x410]
jmp 0x4f910f
lea ecx, [ebx + 0x410]
mov eax, dword [ebx + 0x444]
test eax, eax
je 0x4f9120
push ecx
push eax
call fcn.00522020
mov eax, dword [ebx + 0x428]
cmp eax, 0x1000000
jne 0x4f927c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, dword [ebx + 0x454]
test eax, eax
je 0x4f9162
mov eax, dword [eax + 0x30]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4f9162
mov eax, dword [ebx + 0x454]
mov ecx, dword [eax + 0x30]
add eax, 0x2c
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea edx, [esp + 0x54]
push edx
call fcn.00487070
push ecx
mov dword [esp + 0x764], 2
mov eax, esp
mov dword [esp + 0x14], esp
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x18], esp
push eax
lea esi, [esp + 0x8c]
call fcn.0048a840
test eax, eax
je 0x4f9272
push str.IDS_KEY_RENEW_SUCCESS
xor al, al
or ecx, 0xffffffff
lea esi, [esp + 0x3c]
mov byte [ebx + 0x50c], 1
call fcn.004adb10
mov byte [esp + 0x760], 3
cmp dword [eax + 0x18], edi
jb 0x4f91d5
mov eax, dword [eax + 4]
jmp 0x4f91d8
add eax, 4
push 0
mov edx, eax
lea ecx, [esp + 0x58]
call fcn.00489000
lea ecx, [esp + 0x38]
mov byte [esp + 0x760], 2
call fcn.0040f400
cmp dword [ebx + 0x424], edi
jb 0x4f9206
mov ecx, dword [ebx + 0x410]
jmp 0x4f920c
lea ecx, [ebx + 0x410]
lea edx, [esp + 0x10]
push edx
call fcn.00425130
lea ecx, [esp + 0x10]
mov byte [esp + 0x760], 4
call fcn.004d57a0
mov eax, dword [esp + 0x10]
push 0x14
push eax
lea ecx, [esp + 0x5c]
push ecx
mov ecx, str.ac_s11_12
call fcn.00489800
push 0
push 1
lea esi, [esp + 0x5c]
call fcn.00488ed0
mov byte [esp + 0x760], 2
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4f9272
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x54]
push ecx
jmp 0x4f97e7
cmp eax, 0x800000
jne 0x4f9422
call fcn.00425b30
push eax
call fcn.00426110
cmp al, 1
jne 0x4f940a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, dword [ebx + 0x454]
test eax, eax
je 0x4f92cb
mov edx, dword [eax + 0x30]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4f92cb
mov eax, dword [ebx + 0x454]
add eax, 0x2c
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [ebx + 0x42c], 0
je 0x4f92df
push ebx
call fcn.004fac70
jmp 0x4f97f7
lea ecx, [esp + 0x54]
push ecx
call fcn.00487070
push ecx
mov dword [esp + 0x764], 7
mov eax, esp
mov dword [esp + 0x14], esp
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov edx, dword [ebx + 0x30]
mov dword [esp + 0x18], esp
push edx
lea esi, [esp + 0x8c]
call fcn.0048a840
test eax, eax
je 0x4f9400
mov byte [ebx + 0x50c], 1
call fcn.00425b30
mov esi, eax
call fcn.004263b0
mov byte [esp + 0x1b], al
push str.IDS_BINDING_DESC
xor al, al
or ecx, 0xffffffff
lea esi, [esp + 0x3c]
call fcn.004adb10
mov byte [esp + 0x760], 8
cmp dword [eax + 0x18], edi
jb 0x4f9362
mov eax, dword [eax + 4]
jmp 0x4f9365
add eax, 4
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.00425130
lea ecx, [esp + 0x38]
mov byte [esp + 0x760], 0xa
call fcn.0040f400
cmp byte [esp + 0x1b], 0
je 0x4f93db
mov edx, 0x58eab0
lea eax, [esp + 0x14]
call fcn.0040eec0
push str.IDS_BINDING_DESC_MORE
xor al, al
or ecx, 0xffffffff
lea esi, [esp + 0x20]
call fcn.004adb10
mov byte [esp + 0x760], 0xb
cmp dword [eax + 0x18], edi
jb 0x4f93bc
mov eax, dword [eax + 4]
jmp 0x4f93bf
add eax, 4
mov edx, eax
lea eax, [esp + 0x14]
call fcn.0040eec0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x760], 0xa
call fcn.0040f400
mov edx, dword [esp + 0x14]
push 0
lea ecx, [esp + 0x58]
call fcn.00489000
push 0
push 1
lea esi, [esp + 0x5c]
call fcn.00488ed0
lea ecx, [esp + 0x14]
call fcn.00425530
lea edx, [esp + 0x54]
push edx
jmp 0x4f97e7
mov eax, dword [ebx + 0x38c]
mov edx, dword [eax + 4]
lea ecx, [ebx + 0x38c]
push 1
call edx
jmp 0x4f97f7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, dword [ebx + 0x454]
test eax, eax
je 0x4f9453
mov eax, dword [eax + 0x30]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4f9453
mov eax, dword [ebx + 0x454]
mov ecx, dword [eax + 0x30]
add eax, 0x2c
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea edx, [esp + 0x2b4]
push edx
call fcn.00487070
push ecx
mov dword [esp + 0x764], 0xe
mov eax, esp
mov dword [esp + 0x14], esp
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x18], esp
push eax
lea esi, [esp + 0x2ec]
call fcn.0048a840
test eax, eax
je 0x4f97df
mov byte [ebx + 0x50c], 1
mov edx, dword [0x5ce94c]
mov eax, dword [edx + 0xc]
mov ecx, 0x5ce94c
call eax
add eax, 0x10
mov dword [esp + 0x10], eax
mov byte [esp + 0x760], 0xf
mov eax, dword [ebx + 0x3ec]
cmp eax, 1
jne 0x4f9521
push str.IDS_REDEEM_PROMPT_SEND_KEY
xor al, al
or ecx, 0xffffffff
lea esi, [esp + 0x20]
call fcn.004adb10
mov byte [esp + 0x760], 0x10
cmp dword [ebx + 0x408], edi
jb 0x4f94f9
mov ecx, dword [ebx + 0x3f4]
jmp 0x4f94ff
lea ecx, [ebx + 0x3f4]
cmp dword [eax + 0x18], edi
jb 0x4f9509
mov eax, dword [eax + 4]
jmp 0x4f950c
add eax, 4
push ecx
push eax
push str._s_n_s
lea edi, [esp + 0x1c]
call fcn.00424dc0
add esp, 0xc
jmp 0x4f9559
cmp eax, 2
jne 0x4f956f
push str.IDS_SEND_KEY_SUCCESS_NO_EMAIL
xor al, al
or ecx, 0xffffffff
lea esi, [esp + 0x20]
call fcn.004adb10
mov byte [esp + 0x760], 0x11
cmp dword [eax + 0x18], edi
jb 0x4f954b
mov eax, dword [eax + 4]
jmp 0x4f954e
add eax, 4
mov edx, eax
lea edi, [esp + 0x10]
call fcn.00425220
lea ecx, [esp + 0x1c]
mov byte [esp + 0x760], 0xf
call fcn.0040f400
mov edi, 8
mov edx, dword [esp + 0x10]
push 0
lea ecx, [esp + 0x2b8]
call fcn.00489000
push str.IDS_SEND_KEY_SUCCESS_NEXT
xor al, al
or ecx, 0xffffffff
lea esi, [esp + 0x20]
call fcn.004adb10
mov byte [esp + 0x760], 0x12
cmp dword [eax + 0x18], edi
jb 0x4f95a6
mov eax, dword [eax + 4]
jmp 0x4f95a9
add eax, 4
push 0xb
push eax
lea ecx, [esp + 0x2bc]
push ecx
mov ecx, str.ac_s10_24
call fcn.00489800
lea ecx, [esp + 0x1c]
mov byte [esp + 0x760], 0xf
call fcn.0040f400
mov eax, dword [ebx + 0x3ec]
cmp eax, 1
jne 0x4f95ee
push 0
push eax
lea esi, [esp + 0x2bc]
call fcn.00488ed0
jmp 0x4f97d6
cmp eax, 2
jne 0x4f97d6
push str.IDS_VIEW_KEY
xor al, al
or ecx, 0xffffffff
lea esi, [esp + 0x20]
mov byte [esp + 0x47e], 1
call fcn.004adb10
mov byte [esp + 0x760], 0x13
cmp dword [eax + 0x18], edi
jb 0x4f9624
mov eax, dword [eax + 4]
jmp 0x4f9627
add eax, 4
push 0
push 1
mov ecx, eax
lea edx, [esp + 0x2bc]
call fcn.00489670
lea ecx, [esp + 0x1c]
mov byte [esp + 0x760], 0xf
call fcn.0040f400
push str.IDS_ADD_EMAIL
xor al, al
or ecx, 0xffffffff
lea esi, [esp + 0x20]
call fcn.004adb10
mov byte [esp + 0x760], 0x14
cmp dword [eax + 0x18], edi
jb 0x4f966f
mov eax, dword [eax + 4]
jmp 0x4f9672
add eax, 4
push 0
push 2
mov ecx, eax
lea edx, [esp + 0x2bc]
call fcn.00489670
lea ecx, [esp + 0x1c]
mov byte [esp + 0x760], 0xf
call fcn.0040f400
push 0
push 0
lea esi, [esp + 0x2bc]
call fcn.00488ed0
cmp eax, 2
jne 0x4f97d6
lea esi, [esp + 0x14]
call fcn.004dfc50
push str.IDS_ACCOUNT_MANAGE_URL
mov al, 1
or ecx, 0xffffffff
lea esi, [esp + 0x20]
mov byte [esp + 0x764], 0x15
call fcn.004adb10
mov byte [esp + 0x760], 0x16
cmp dword [eax + 0x18], edi
jb 0x4f96e4
mov eax, dword [eax + 4]
jmp 0x4f96e7
add eax, 4
mov edx, eax
lea edi, [esp + 0x14]
call fcn.00425220
lea ecx, [esp + 0x1c]
mov byte [esp + 0x760], 0x15
call fcn.0040f400
mov edx, dword [esp + 0x14]
cmp dword [edx - 0xc], 0
je 0x4f97cd
mov edx, str._utm_sourceIAutm_mediumACCOUNTutm_contentEMAIL_ADD
mov eax, edi
call fcn.0040eec0
lea eax, [esp + 0x514]
push eax
call int.004255e0
mov byte [esp + 0x760], 0x17
call fcn.00425b30
push 0x40
lea ecx, [esp + 0x518]
push ecx
call fcn.004258f0
xor edx, edx
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], 0
mov word [esp + 0x3c], dx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x540]
push ecx
mov byte [esp + 0x768], 0x18
call fcn.00404ef0
add esp, 8
cmp dword [esp + 0x4c], 0
je 0x4f97a5
mov edx, 0x5943a0
mov eax, edi
call fcn.0040eec0
cmp dword [esp + 0x50], 8
mov edx, dword [esp + 0x3c]
jae 0x4f979c
lea edx, [esp + 0x3c]
lea eax, [esp + 0x14]
call fcn.0040eec0
mov edx, dword [esp + 0x14]
push edx
push ecx
call fcn.00402230
add esp, 4
call fcn.004d4e10
lea ecx, [esp + 0x38]
call fcn.0040f400
lea edi, [esp + 0x514]
call fcn.00425ba0
lea ecx, [esp + 0x14]
call fcn.00425530
lea ecx, [esp + 0x10]
call fcn.00425530
lea eax, [esp + 0x2b4]
push eax
mov dword [esp + 0x764], 0xffffffff
call fcn.00487240
xor esi, esi
lea edi, [ebx + 0x3f0]
mov dword [ebx + 0x3ec], esi
call fcn.0040f6c0
lea edi, [ebx + 0x40c]
call fcn.0040f6c0
mov dword [ebx + 0x428], esi
mov byte [ebx + 0x42c], 1
mov ecx, dword [ebx + 0x4e8]
push esi
push ecx
push 2
mov eax, ebx
call fcn.004eaf50
mov al, 1
mov ecx, dword [esp + 0x758]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x740]
xor ecx, esp
call fcn.0053d78d
mov esp, ebp
pop ebp
ret 4