Function at 0x4b6d50
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0xcce038]
imul eax, eax, 0x49fc
mov ecx, dword [eax + 0x101b3f4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, 0xd9
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 3
ja case.default.0x4b6d83
mov eax, dword [ebp - 8]
jmp dword [eax*4 + 0x4b71a4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx + 0x118]
mov ecx, dword [eax + 4]
mov edx, dword [0x5ef118]
mov dword [ecx], edx
mov eax, dword [0x5ef11c]
mov dword [ecx + 4], eax
mov edx, dword [0x5ef120]
mov dword [ecx + 8], edx
mov eax, dword [0x5ef124]
mov dword [ecx + 0xc], eax
mov edx, dword [0x5ef128]
mov dword [ecx + 0x10], edx
mov al, byte [0x5ef12c]
mov byte [ecx + 0x14], al
jmp case.default.0x4b6d83
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx + 0x118]
mov ecx, dword [eax + 4]
mov edx, dword [0x5ef130]
mov dword [ecx], edx
mov eax, dword [0x5ef134]
mov dword [ecx + 4], eax
mov edx, dword [0x5ef138]
mov dword [ecx + 8], edx
mov eax, dword [0x5ef13c]
mov dword [ecx + 0xc], eax
mov edx, dword [0x5ef140]
mov dword [ecx + 0x10], edx
mov al, byte [0x5ef144]
mov byte [ecx + 0x14], al
jmp case.default.0x4b6d83
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx + 0x118]
mov ecx, dword [eax + 4]
mov edx, dword [0x5ef148]
mov dword [ecx], edx
mov eax, dword [0x5ef14c]
mov dword [ecx + 4], eax
mov edx, dword [0x5ef150]
mov dword [ecx + 8], edx
mov eax, dword [0x5ef154]
mov dword [ecx + 0xc], eax
mov edx, dword [0x5ef158]
mov dword [ecx + 0x10], edx
mov al, byte [0x5ef15c]
mov byte [ecx + 0x14], al
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx + 0x13c]
mov ecx, dword [eax + 4]
mov dl, byte [0x5ecdaf]
mov byte [ecx], dl
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ecx + 0x160]
mov eax, dword [edx + 4]
mov cl, byte [0x5ecdbd]
mov byte [eax], cl
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
mov ecx, dword [eax + 0x184]
mov edx, dword [ecx + 4]
mov al, byte [0x5ecdbe]
mov byte [edx], al
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx + 0x1a8]
mov ecx, dword [eax + 4]
mov dl, byte [0x5ecdbf]
mov byte [ecx], dl
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ecx + 0x3e8]
mov dword [edx], 0x3ba39
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ecx + 0x1cc]
mov dword [edx], 0x3ba3e
mov dword [ebp - 4], 0
jmp 0x4b6ee5
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 6
jge 0x4b6f1b
mov ecx, dword [ebp - 4]
add ecx, 0xd
imul ecx, ecx, 0x24
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
mov dword [eax + ecx + 0x18], 0
mov ecx, dword [ebp - 4]
add ecx, 0xd
imul ecx, ecx, 0x24
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
mov dword [eax + ecx + 0x20], 0x4bc3c0
jmp 0x4b6edc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov dword [edx + 0x330], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov dword [ecx + 0x2e8], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
mov dword [eax + 0x2c4], 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov dword [edx + 0x2cc], 0x4bc580
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov dword [ecx + 0x30c], 1
mov edx, dword [0xcce038]
imul edx, edx, 0x49fc
cmp dword [edx + 0x101b3f4], 0xdc
jne 0x4b6f93
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov dword [ecx + 0x30c], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
mov dword [eax + 0x354], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov dword [edx + 0x378], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov dword [ecx + 0x39c], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
mov ecx, dword [eax + 0x88]
mov dword [ecx + 4], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
mov ecx, dword [eax + 0x88]
mov edx, dword [ecx]
mov dword [edx + 0x2b0], 6
cmp dword [0x1210980], 0x186a0
jl 0x4b701e
cmp dword [0x1210980], 0x18a87
jg 0x4b701e
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ecx + 0x88]
mov eax, dword [edx]
mov dword [eax + 0x2b0], 0x10
cmp dword [0x1210980], 0x19a28
jl 0x4b704e
cmp dword [0x1210980], 0x1a130
jg 0x4b704e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx + 0x88]
mov ecx, dword [eax]
mov dword [ecx + 0x2b0], 0x10
cmp dword [0x1210980], 0x1af0e
jl 0x4b707e
cmp dword [0x1210980], 0x1af25
jg 0x4b707e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
mov ecx, dword [eax + 0x88]
mov edx, dword [ecx]
mov dword [edx + 0x2b0], 0x10
cmp dword [0x1210980], 0x18a26
jne 0x4b70a2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ecx + 0x88]
mov eax, dword [edx]
mov dword [eax + 0x2b0], 6
call fcn.005cbcdc
cdq
mov ecx, 6
idiv ecx
imul edx, edx, 0x3e8
mov eax, dword [0xce2ffc]
imul eax, eax, 0x65c
mov ecx, dword [eax + 0x1210fe8]
imul ecx, ecx, 0xbb8
lea edx, [edx + ecx + 0x1388]
mov dword [0xccdec0], edx
movsx eax, byte [0x63ee7e]
test eax, eax
je 0x4b7108
mov ecx, dword [0x1210818]
movsx edx, byte [ecx + str.d_ZUPKF]
mov eax, edx
imul eax, dword [0xccdec0]
xor edx, edx
mov ecx, 0x64
div ecx
mov dword [0xccdec0], eax
mov eax, dword [0xccdec0]
xor edx, edx
mov ecx, 0x3e8
div ecx
push eax
mov edx, dword [0xfd5768]
push edx
call fcn.00587ed0
add esp, 8
call dword [sym.imp.kernel32.dll_GetTickCount]
cmp eax, 0x35a4e900
jbe 0x4b7147
call dword [sym.imp.kernel32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x35a4e900
div ecx
mov dword [ebp - 0xc], edx
jmp 0x4b7150
call dword [sym.imp.kernel32.dll_GetTickCount]
mov dword [ebp - 0xc], eax
mov edx, dword [0xccdec0]
add edx, dword [ebp - 0xc]
mov dword [0xccdec0], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov dword [ecx + 0xa8], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
mov dword [eax + 0xcc], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov dword [edx + 0xf0], 0
mov dword [0xce24fc], 0xffffffff
mov byte [0xcbd7c6], 4
mov esp, ebp
pop ebp
ret