Function at 0x4f0e21
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
call fcn.004f0b07
mov ebx, dword [0xcea032]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [0xcea03e]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x20
mov dword [ebp - 4], ebx
mov ebx, dword [ebp - 4]
cmp dword [ebx], 0
je 0x4f10b8
mov ebx, dword [0xcea032]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [0xcea03e]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x20
mov dword [ebp - 4], ebx
mov ebx, dword [0xcea032]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [0xcea03e]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 8], ebx
mov ebx, dword [0xcea032]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [0xcea03e]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0xc], ebx
push 0
mov ebx, dword [ebp - 0xc]
push dword [ebx]
mov ebx, dword [ebp - 8]
push dword [ebx]
push 0x10
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.0048f668
mov dword [0xcea056], eax
cmp dword [0xcea056], 0
jne 0x4f0fcc
mov dword [0xcea056], 0
mov dword [0xcea04e], 1
push 0
mov ebx, 0x2dc
call fcn.006a5ae0
add esp, 4
mov dword [ebp - 4], eax
push 0
mov ebx, 0x2e0
call fcn.006a5b00
add esp, 4
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x10]
fld qword [ebp - 0x10]
fadd qword [0xcae9bd]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
call fcn.0048a26e
push eax
push dword [ebp - 4]
push dword [0xcea03e]
call fcn.004f118c
mov dword [0xcea046], 0
mov ebx, dword [0xcea032]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [0xcea03e]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 4], ebx
mov ebx, dword [ebp - 4]
cmp dword [ebx], 0
je 0x4f0fb3
push 0
mov ebx, 0x308
call sub.kernel32.dll_GetTickCount
add esp, 4
mov dword [0xcea052], eax
jmp 0x4f0fc7
mov dword [0xcea046], 0
mov dword [0xcea052], 0xffffffff
jmp 0x4f10b3
cmp dword [0xcea056], 1
jne 0x4f1006
mov dword [0xcea056], 0xffffffff
mov dword [0xcea046], 0
mov dword [0xcea052], 0xffffffff
mov eax, 1
jmp 0x4f1188
cmp dword [0xcea056], 2
jne 0x4f1095
mov dword [0xcea056], 0xfffffffe
mov dword [0xcea04e], 1
mov dword [0xcea046], 0
mov ebx, dword [0xcea032]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [0xcea03e]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 4], ebx
mov ebx, dword [ebp - 4]
cmp dword [ebx], 0
je 0x4f107c
push 0
mov ebx, 0x308
call sub.kernel32.dll_GetTickCount
add esp, 4
mov dword [0xcea052], eax
jmp 0x4f1086
mov dword [0xcea052], 0xffffffff
mov eax, 2
jmp 0x4f1188
mov dword [0xcea056], 0xffffffff
mov dword [0xcea046], 0
mov dword [0xcea052], 0xffffffff
jmp 0x4f117e
mov dword [0xcea056], 0
mov dword [0xcea04e], 1
push 0
mov ebx, 0x2dc
call fcn.006a5ae0
add esp, 4
mov dword [ebp - 4], eax
push 0
mov ebx, 0x2e0
call fcn.006a5b00
add esp, 4
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x10]
fld qword [ebp - 0x10]
fadd qword [0xcae9bd]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
call fcn.0048a26e
push eax
push dword [ebp - 4]
push dword [0xcea03e]
call fcn.004f118c
mov dword [0xcea046], 0
mov ebx, dword [0xcea032]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [0xcea03e]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 4], ebx
mov ebx, dword [ebp - 4]
cmp dword [ebx], 0
je 0x4f1174
push 0
mov ebx, 0x308
call sub.kernel32.dll_GetTickCount
add esp, 4
mov dword [0xcea052], eax
jmp 0x4f117e
mov dword [0xcea052], 0xffffffff
mov eax, 0
jmp 0x4f1188
mov esp, ebp
pop ebp
ret