Function at 0x4b1638
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffea8
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x154], edx
mov dword [ebp - 0x158], edx
mov dword [ebp - 0x12c], edx
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x148], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4b1b44
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_GetTickCount
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x4b1ad2
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x21], 0
call fcn.00407b30
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x20], eax
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x28]
cmp eax, 0xc8
jbe 0x4b1851
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 4]
mov dword [edx + 0x28], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x5c]
cmp eax, dword [edx + 8]
jge 0x4b16f4
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
call fcn.00411704
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x5c]
mov edx, dword [edx + 8]
dec edx
cmp eax, edx
jge 0x4b1710
mov eax, dword [ebp - 4]
inc dword [eax + 0x38]
jmp 0x4b1718
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x38], edx
cmp dword [ebp - 0x20], 0
je 0x4b1851
mov eax, dword [ebp - 0x20]
cmp byte [eax + 0x18], 0
je 0x4b1851
mov eax, dword [0x4ea4e4]
cmp byte [eax], 0
jne 0x4b1851
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x38], 0
je 0x4b1764
call sub.kernel32.dll_GetTickCount
mov ebx, eax
mov eax, dword [ebp - 0x20]
sub ebx, dword [eax + 0x38]
push ebp
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x34]
call fcn.004b1590
pop ecx
cmp ebx, eax
jbe 0x4b17a9
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.004ae19c
mov dword [ebp - 0x10], eax
mov byte [ebp - 0x22], 1
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x30]
cmp eax, dword [ebp - 0x10]
jle 0x4b1798
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x30]
sub ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.004adf04
mov byte [ebp - 0x22], al
cmp byte [ebp - 0x22], 0
je 0x4b17a9
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 0x20]
mov dword [edx + 0x38], eax
mov eax, dword [ebp - 0x20]
lea edx, [eax + 0x18]
lea eax, [ebp - 0x140]
call fcn.00402a18
mov edx, 0x4b1b54
lea eax, [ebp - 0x140]
mov cl, 0xf
call fcn.004029e8
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x130]
call fcn.00403e70
push dword [ebp - 0x130]
lea edx, [ebp - 0x144]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
call fcn.004091c0
push dword [ebp - 0x144]
push 0x4b1b60
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 8]
call fcn.004091c0
push dword [ebp - 0x148]
lea eax, [ebp - 0x12c]
mov edx, 4
call fcn.00403f8c
mov edx, dword [ebp - 0x12c]
lea eax, [ebp - 0x128]
mov ecx, 0xff
call fcn.00403ea8
lea edx, [ebp - 0x128]
mov eax, dword [0x4ea2bc]
mov cl, 0x1e
call fcn.00402a34
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x88], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x5c]
mov edx, dword [edx + 8]
dec edx
sub edx, eax
jl 0x4b1a5d
inc edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 8]
call fcn.00411704
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx + 0x3c]
cmp eax, dword [edx + 8]
jge 0x4b18a8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0xc], eax
jmp 0x4b18ad
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x40], edx
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x3c]
mov eax, dword [eax + 8]
cmp eax, dword [ebp - 0xc]
jle 0x4b1a4b
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x3c]
mov edx, dword [ebp - 0xc]
call fcn.00411704
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0x2fc], 0
jne 0x4b1956
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
sub edx, dword [eax + 0x368]
mov eax, dword [ebp - 0x1c]
cmp edx, dword [eax + 0x36c]
jle 0x4b194b
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x368], edx
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 0x1c]
sub eax, dword [edx + 0x364]
mov edx, dword [ebp - 0x1c]
cmp eax, dword [edx + 0x360]
jbe 0x4b1936
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x364], eax
mov eax, dword [ebp - 0x1c]
call fcn.004b966c
mov eax, dword [ebp - 0x1c]
mov bx, 0xfffb
call fcn.004030dc
mov eax, dword [ebp - 4]
inc dword [eax + 0x88]
mov eax, dword [ebp - 4]
inc dword [eax + 0x80]
jmp 0x4b1986
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 0x1c]
sub eax, dword [edx + 0x300]
cmp eax, 0x493e0
jbe 0x4b1986
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x3c]
mov edx, dword [ebp - 0xc]
call fcn.004115a4
mov eax, dword [ebp - 0x1c]
call fcn.00402f00
jmp 0x4b18b5
inc dword [ebp - 0xc]
call sub.kernel32.dll_GetTickCount
sub eax, dword [ebp - 0x14]
mov edx, dword [0x4ea058]
cmp eax, dword [edx]
jbe 0x4b18b5
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 0x15]
lea eax, [ebp - 0x140]
call fcn.00402a18
mov edx, 0x4b1b64
lea eax, [ebp - 0x140]
mov cl, 0xf
call fcn.004029e8
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x150]
call fcn.00403e70
push dword [ebp - 0x150]
lea edx, [ebp - 0x154]
mov eax, dword [ebp - 8]
call fcn.004091c0
push dword [ebp - 0x154]
push 0x4b1b60
lea edx, [ebp - 0x158]
mov eax, dword [ebp - 0xc]
call fcn.004091c0
push dword [ebp - 0x158]
lea eax, [ebp - 0x14c]
mov edx, 4
call fcn.00403f8c
mov edx, dword [ebp - 0x14c]
lea eax, [ebp - 0x128]
mov ecx, 0xff
call fcn.00403ea8
lea edx, [ebp - 0x128]
mov eax, dword [0x4ea374]
mov cl, 0x1e
call fcn.00402a34
mov byte [ebp - 0x21], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0x40], edx
cmp byte [ebp - 0x21], 0
jne 0x4b1a5d
inc dword [ebp - 8]
dec dword [ebp - 0x28]
jne 0x4b187b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 8]
cmp eax, dword [ebp - 8]
jg 0x4b1aaf
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x3c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
mov edx, dword [ebp - 4]
mov dword [edx + 0x7c], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x80], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x84]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x88]
sar eax, 1
jns 0x4b1aa6
adc eax, 0
mov edx, dword [ebp - 4]
mov dword [edx + 0x84], eax
cmp byte [ebp - 0x21], 0
jne 0x4b1abf
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x3c], edx
jmp 0x4b1ac8
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov dword [eax + 0x3c], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b1ae6
call sub.kernel32.dll_GetTickCount
sub eax, dword [ebp - 0x14]
mov edx, dword [0x4ea384]
mov dword [edx], eax
mov eax, dword [0x4ea5c4]
mov eax, dword [eax]
mov edx, dword [0x4ea384]
cmp eax, dword [edx]
jge 0x4b1b16
mov eax, dword [0x4ea384]
mov eax, dword [eax]
mov edx, dword [0x4ea5c4]
mov dword [edx], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b1b4b
lea eax, [ebp - 0x158]
mov edx, 6
call fcn.00403c70
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.00403c70
ret