Function at 0x4d9bd0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x21
push 0
push 0
dec ecx
jne 0x4d9bd8
push ebx
push esi
push edi
mov dword [ebp - 4], eax
lea eax, [ebp - 0x71]
mov edx, dword [0x4cffa4]
call fcn.00405230
xor eax, eax
push ebp
push 0x4da28b
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.KERNEL32.DLL_GetTickCount
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x308]
cmp eax, 0x2710
jb 0x4da204
lea eax, [ebp - 0x78]
call fcn.0048ced8
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x10]
mov ecx, 0x4da2a4
call fcn.00404a6c
mov eax, dword [ebp - 0x10]
call fcn.00409520
test al, al
je 0x4d9d8c
mov dl, 1
mov eax, dword [0x417364]
call fcn.00403900
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov al, byte [0x4da2b8]
push eax
lea eax, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x80]
xor ecx, ecx
mov edx, 0x4da2c4
call fcn.0040dfd8
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x28]
mov edx, 0x4da2d0
call fcn.0049eda0
cmp dword [ebp - 0x28], 0
je 0x4d9d82
xor eax, eax
push ebp
push 0x4d9d70
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x38]
push eax
mov ecx, 1
mov edx, 0x4da2e4
mov eax, dword [ebp - 0x28]
call fcn.0048cd64
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x94]
push eax
mov ecx, 2
mov edx, 0x4da2e4
mov eax, dword [ebp - 0x28]
call fcn.0048cd64
mov eax, dword [ebp - 0x94]
mov edx, 0x4da2f0
call fcn.00404b6c
sete al
push eax
lea eax, [ebp - 0xa4]
xor edx, edx
call fcn.004147c0
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xb4]
mov dl, 1
call fcn.004147c0
lea edx, [ebp - 0xb4]
pop ecx
pop eax
call fcn.0048ce2c
lea eax, [ebp - 0x90]
call fcn.00412230
mov byte [ebp - 0x39], al
lea eax, [ebp - 0xb8]
push eax
mov ecx, 3
mov edx, 0x4da2e4
mov eax, dword [ebp - 0x28]
call fcn.0048cd64
mov eax, dword [ebp - 0xb8]
xor edx, edx
call fcn.00409190
cdq
mov ecx, dword [0x4eb080]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x60]
mov dword [ecx + 0x30], eax
mov dword [ecx + 0x34], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d9d82
mov eax, dword [ebp - 0x24]
call fcn.00403930
jmp 0x4d9d94
mov eax, dword [ebp - 4]
call fcn.0045acd0
mov eax, dword [0x4eb080]
mov eax, dword [eax]
call fcn.004d06d0
fstp qword [ebp - 0x20]
wait
lea eax, [ebp - 0xbc]
call fcn.0048ced8
mov edx, dword [ebp - 0xbc]
lea eax, [ebp - 0xc]
mov ecx, 0x4da2fc
call fcn.00404a6c
mov eax, dword [ebp - 0xc]
call fcn.00409530
test al, al
jne 0x4d9dd6
mov eax, dword [ebp - 0xc]
call fcn.00409554
mov eax, dword [ebp - 0xc]
call fcn.00409530
test al, al
je 0x4da204
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea edx, [ebp - 0xc0]
mov eax, 0x4da310
call fcn.0040b8b4
mov edx, dword [ebp - 0xc0]
lea eax, [ebp - 8]
mov ecx, 0x4da328
call fcn.00404a6c
push 0x4da338
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea edx, [ebp - 0xc4]
mov eax, 0x4da354
call fcn.0040b8b4
push dword [ebp - 0xc4]
push 0x4da368
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404ae0
mov dl, 1
mov eax, dword [0x42297c]
call fcn.00428dd4
mov esi, eax
push 0x4da36c
push 0x4da37c
call sub.user32.dll_FindWindowA
mov ebx, eax
test ebx, ebx
jne 0x4d9e6c
call fcn.0048ca78
mov ebx, eax
test ebx, ebx
jbe 0x4d9e80
xor ecx, ecx
mov edx, esi
mov eax, ebx
call fcn.0048c904
mov byte [ebp - 0x31], al
jmp 0x4d9eb0
push 0x4da398
push 0
call sub.user32.dll_FindWindowA
mov ebx, eax
test ebx, ebx
jne 0x4d9ea0
push 0x4da3ac
push 0
call sub.user32.dll_FindWindowA
mov ebx, eax
test ebx, ebx
jbe 0x4d9eb0
mov edx, esi
mov eax, ebx
call fcn.0048c74c
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x4d9f00
mov dl, 1
mov eax, dword [0x49fb4c]
call fcn.0049fe00
mov edi, eax
mov byte [edi + 0x3f], 0x50
mov edx, esi
mov eax, edi
mov ecx, dword [eax]
call dword [ecx + 8]
push dword [ebp - 0xc]
push 0x4da3c8
push dword [ebp - 8]
lea eax, [ebp - 0xc8]
mov edx, 3
call fcn.00404ae0
mov edx, dword [ebp - 0xc8]
mov eax, edi
mov ecx, dword [eax]
call dword [ecx + 0x50]
mov eax, edi
call fcn.00403930
mov eax, esi
call fcn.00403930
test ebx, ebx
je 0x4da204
push dword [ebp - 0xc]
push 0x4da3c8
push dword [ebp - 8]
lea eax, [ebp - 0xcc]
mov edx, 3
call fcn.00404ae0
mov eax, dword [ebp - 0xcc]
call fcn.00409520
test al, al
je 0x4da204
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x28]
mov eax, dword [0x4eb080]
mov eax, dword [eax]
mov eax, dword [eax + 0x60]
call fcn.0049f750
dec eax
jne 0x4da204
mov dl, 1
mov eax, dword [0x417364]
call fcn.00403900
mov dword [ebp - 0x24], eax
mov al, byte [0x4da2b8]
push eax
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x4da2c4
mov edx, 0x4da3d4
mov eax, dword [ebp - 0x28]
call fcn.0040dfd8
mov eax, dword [ebp - 0xd4]
lea edx, [ebp - 0xd0]
call fcn.00408f18
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 4
jl 0x4da1e2
lea eax, [ebp - 0x71]
call fcn.00404760
lea ecx, [ebp - 0xd8]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x6d]
call fcn.004047f8
lea ecx, [ebp - 0xdc]
mov edx, 1
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdc]
lea eax, [ebp - 0x69]
call fcn.004047f8
lea ecx, [ebp - 0xe0]
mov edx, 2
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe0]
lea eax, [ebp - 0x65]
call fcn.004047f8
lea ecx, [ebp - 0xe4]
mov edx, 3
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe4]
lea eax, [ebp - 0x61]
call fcn.004047f8
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 4
jle 0x4da0d9
lea ecx, [ebp - 0xe8]
mov edx, 4
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe8]
lea eax, [ebp - 0x5d]
call fcn.004047f8
lea ecx, [ebp - 0xec]
mov edx, 5
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xec]
lea eax, [ebp - 0x59]
call fcn.004047f8
lea ecx, [ebp - 0xf0]
mov edx, 6
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf0]
lea eax, [ebp - 0x55]
call fcn.004047f8
lea ecx, [ebp - 0xf4]
mov edx, 7
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf4]
lea eax, [ebp - 0x51]
call fcn.004047f8
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 8
jle 0x4da16e
lea ecx, [ebp - 0xf8]
mov edx, 8
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf8]
lea eax, [ebp - 0x4d]
call fcn.004047f8
lea ecx, [ebp - 0xfc]
mov edx, 9
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfc]
lea eax, [ebp - 0x49]
call fcn.004047f8
lea ecx, [ebp - 0x100]
mov edx, 0xa
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x100]
lea eax, [ebp - 0x45]
call fcn.004047f8
lea ecx, [ebp - 0x104]
mov edx, 0xb
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 0x41]
call fcn.004047f8
lea eax, [ebp - 0x3d]
mov edx, dword [ebp - 0x2c]
call fcn.004047f8
mov eax, dword [ebp - 0x14]
push eax
push dword [ebp - 0xc]
push 0x4da3c8
push dword [ebp - 8]
lea eax, [ebp - 0x108]
mov edx, 3
call fcn.00404ae0
mov eax, dword [ebp - 0x108]
push eax
mov al, byte [ebp - 0x39]
push eax
push 0
mov eax, dword [0x4eb080]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x71]
call fcn.004d0850
test al, al
je 0x4da1fc
push 0x40
push 0x4da3d8
push 0x4da3e4
call sub.user32.dll_GetForegroundWindow
push eax
call sub.user32.dll_MessageBoxA
call sub.KERNEL32.DLL_GetTickCount
mov edx, dword [ebp - 4]
mov dword [edx + 0x308], eax
jmp 0x4da1fc
push 0x10
push 0x4da418
push 0x4da424
mov eax, dword [ebp - 4]
call fcn.00445180
push eax
call sub.user32.dll_MessageBoxA
mov eax, dword [ebp - 0x24]
call fcn.00403930
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4da295
lea eax, [ebp - 0x108]
mov edx, 0x15
call fcn.00404784
lea eax, [ebp - 0xb4]
mov edx, dword [0x4010f0]
mov ecx, 2
call fcn.0040534c
lea eax, [ebp - 0x94]
call fcn.00404760
lea eax, [ebp - 0x90]
call fcn.0041036c
lea eax, [ebp - 0x80]
mov edx, 3
call fcn.00404784
lea eax, [ebp - 0x71]
mov edx, dword [0x4cffa4]
call fcn.00405300
lea eax, [ebp - 0x38]
call fcn.00404760
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.00404784
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.00404784
ret