Function at 0x4aaaa4
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 5
push 0
push 0
dec ecx
jne 0x4aaaad
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00406e54
mov eax, dword [ebp - 8]
call fcn.00406e54
xor eax, eax
push ebp
push 0x4aad21
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xd], 1
lea eax, [ebp - 0x14]
mov ecx, 0x4aad40
mov edx, dword [ebp - 8]
call fcn.00407328
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ba344]
mov eax, dword [eax + 0x388]
mov eax, dword [eax + 0x2a0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x4b4390]
mov eax, dword [eax]
call fcn.004a798c
mov ebx, 1
call sub.kernel32.dll_GetTickCount_1
mov esi, eax
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.004aa840
test al, al
jne 0x4aab67
jmp 0x4aab56
push 0x12c
call sub.kernel32.dll_Sleep_1
call sub.kernel32.dll_GetTickCount_1
sub eax, esi
cmp edi, eax
jae 0x4aab56
mov byte [ebp - 0xd], 0
jmp 0x4aacf9
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.004aa840
test al, al
je 0x4aab38
inc ebx
cmp ebx, 4
jne 0x4aab1e
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
call fcn.00411cd0
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.0041051c
mov eax, dword [ebp - 0x18]
mov edx, 0x4aad54
call fcn.0040752c
je 0x4aabbb
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 8]
call fcn.00411c90
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.0041051c
mov eax, dword [ebp - 0x20]
mov edx, 0x4aad6c
call fcn.0040752c
jne 0x4aac3d
push 0x4aadb4
push dword [ebp - 8]
push 0x4aad40
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040740c
mov eax, dword [0x4ba344]
mov eax, dword [eax + 0x388]
mov eax, dword [eax + 0x2a0]
mov edx, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0xc]
call fcn.004aa554
mov eax, dword [ebp - 8]
call fcn.004aa6e4
test al, al
jne 0x4aac3d
push 0x4aaddc
push dword [ebp - 8]
push 0x4aae24
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040740c
mov eax, dword [0x4ba344]
mov eax, dword [eax + 0x388]
mov eax, dword [eax + 0x2a0]
mov edx, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0xc]
call fcn.004aa554
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 8]
call fcn.00411cd0
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.0041051c
mov eax, dword [ebp - 0x28]
mov edx, 0x4aae60
call fcn.0040752c
jne 0x4aaced
push 0x4aae78
push dword [ebp - 8]
push 0x4aad40
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040740c
mov eax, dword [0x4ba344]
mov eax, dword [eax + 0x388]
mov eax, dword [eax + 0x2a0]
mov edx, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0xc]
call fcn.004aa554
mov edx, 0x4aae9c
mov eax, dword [ebp - 8]
call fcn.004aa398
test al, al
jne 0x4aaced
push 0x4aaec4
push dword [ebp - 8]
push 0x4aae24
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040740c
mov eax, dword [0x4ba344]
mov eax, dword [eax + 0x388]
mov eax, dword [eax + 0x2a0]
mov edx, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0xc]
call fcn.004aa554
mov eax, dword [0x4b4390]
mov eax, dword [eax]
call fcn.004a798c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4aad28
lea eax, [ebp - 0x2c]
mov edx, 7
call fcn.00406e64
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00406e64
ret