Function at 0x4daa08
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x3c
push 0
push 0
dec ecx
jne 0x4daa11
xchg dword [ebp - 4], ecx
push ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00405618
xor eax, eax
push ebp
push 0x4dafb2
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xd], 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405690
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x4daa6c
mov eax, dword [ebp - 0x1c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 8]
call fcn.00405690
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x14]
call fcn.0047dd9c
mov ax, word [ebp - 0x24]
sub ax, 0x64
je 0x4daab8
dec ax
je 0x4dab9f
dec ax
je 0x4dace4
dec ax
je 0x4dae29
jmp 0x4daf5b
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0x31], 0
je 0x4daad3
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0x38]
cmp eax, 0xc8
jbe 0x4dab00
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x38], eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.004d96f8
test al, al
je 0x4daf62
mov eax, dword [ebp - 0xc]
mov byte [eax + 0x31], 1
jmp 0x4daf62
mov eax, dword [0x4e4440]
inc dword [eax]
mov eax, dword [0x4e474c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x4daf62
mov edx, 0x4dafc4
lea eax, [ebp - 0x68]
call fcn.00403894
mov eax, dword [ebp - 0xc]
mov edx, eax
lea eax, [ebp - 0x68]
mov cl, 0x24
call fcn.00403864
lea edx, [ebp - 0x68]
lea eax, [ebp - 0x90]
call fcn.00403894
mov edx, 0x4dafe0
lea eax, [ebp - 0x90]
mov cl, 0x25
call fcn.00403864
lea edx, [ebp - 0x90]
lea eax, [ebp - 0xcc]
call fcn.00403894
mov eax, dword [ebp - 0xc]
lea edx, [eax + 0xb]
lea eax, [ebp - 0xcc]
mov cl, 0x39
call fcn.00403864
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0x40]
call fcn.004053fc
mov eax, dword [ebp - 0x40]
call fcn.004d7ac8
jmp 0x4daf62
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0x38]
cmp eax, 0x3e8
jbe 0x4dac36
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x38], eax
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0
je 0x4dac26
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x24]
push eax
lea eax, [ebp - 0xd0]
mov edx, dword [ebp - 0xc]
add edx, 0xb
call fcn.004053fc
mov eax, dword [ebp - 0xd0]
push eax
lea eax, [ebp - 0xd4]
mov edx, dword [ebp - 0xc]
call fcn.004053fc
mov edx, dword [ebp - 0xd4]
mov eax, dword [0x4e4540]
mov eax, dword [eax]
pop ecx
call fcn.004d6ff8
test al, al
je 0x4dac26
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.004d9ce8
mov eax, dword [ebp - 0xc]
mov byte [eax + 0x31], 0
jmp 0x4daf62
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.004da96c
jmp 0x4daf62
mov eax, dword [0x4e40a4]
inc dword [eax]
mov eax, dword [0x4e474c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x4daf62
mov edx, 0x4dafe4
lea eax, [ebp - 0xfc]
call fcn.00403894
mov eax, dword [ebp - 0xc]
mov edx, eax
lea eax, [ebp - 0xfc]
mov cl, 0x22
call fcn.00403864
lea edx, [ebp - 0xfc]
lea eax, [ebp - 0x120]
call fcn.00403894
mov edx, 0x4dafe0
lea eax, [ebp - 0x120]
mov cl, 0x23
call fcn.00403864
lea edx, [ebp - 0x120]
lea eax, [ebp - 0x158]
call fcn.00403894
mov eax, dword [ebp - 0xc]
lea edx, [eax + 0xb]
lea eax, [ebp - 0x158]
mov cl, 0x37
call fcn.00403864
lea edx, [ebp - 0x158]
lea eax, [ebp - 0xd8]
call fcn.004053fc
mov eax, dword [ebp - 0xd8]
call fcn.004d7ac8
jmp 0x4daf62
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0x38]
cmp eax, 0x3e8
jbe 0x4dad7b
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x38], eax
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0
je 0x4dad6b
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x24]
push eax
lea eax, [ebp - 0x15c]
mov edx, dword [ebp - 0xc]
add edx, 0xb
call fcn.004053fc
mov eax, dword [ebp - 0x15c]
push eax
lea eax, [ebp - 0x160]
mov edx, dword [ebp - 0xc]
call fcn.004053fc
mov edx, dword [ebp - 0x160]
mov eax, dword [0x4e4540]
mov eax, dword [eax]
pop ecx
call fcn.004d6ff8
test al, al
je 0x4dad6b
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.004da374
mov eax, dword [ebp - 0xc]
mov byte [eax + 0x31], 0
jmp 0x4daf62
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.004da96c
jmp 0x4daf62
mov eax, dword [0x4e4338]
inc dword [eax]
mov eax, dword [0x4e474c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x4daf62
mov edx, 0x4db000
lea eax, [ebp - 0xfc]
call fcn.00403894
mov eax, dword [ebp - 0xc]
mov edx, eax
lea eax, [ebp - 0xfc]
mov cl, 0x22
call fcn.00403864
lea edx, [ebp - 0xfc]
lea eax, [ebp - 0x120]
call fcn.00403894
mov edx, 0x4dafe0
lea eax, [ebp - 0x120]
mov cl, 0x23
call fcn.00403864
lea edx, [ebp - 0x120]
lea eax, [ebp - 0x158]
call fcn.00403894
mov eax, dword [ebp - 0xc]
lea edx, [eax + 0xb]
lea eax, [ebp - 0x158]
mov cl, 0x37
call fcn.00403864
lea edx, [ebp - 0x158]
lea eax, [ebp - 0x164]
call fcn.004053fc
mov eax, dword [ebp - 0x164]
call fcn.004d7ac8
jmp 0x4daf62
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0x30], 0
jne 0x4daeb0
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0
je 0x4daea0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x24]
push eax
lea eax, [ebp - 0x168]
mov edx, dword [ebp - 0xc]
add edx, 0xb
call fcn.004053fc
mov eax, dword [ebp - 0x168]
push eax
lea eax, [ebp - 0x16c]
mov edx, dword [ebp - 0xc]
call fcn.004053fc
mov edx, dword [ebp - 0x16c]
mov eax, dword [0x4e4540]
mov eax, dword [eax]
pop ecx
call fcn.004d6ff8
test al, al
je 0x4daea0
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.004da534
test al, al
je 0x4daf62
mov eax, dword [ebp - 0xc]
mov byte [eax + 0x30], 1
jmp 0x4daf62
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.004da96c
jmp 0x4daf62
mov eax, dword [0x4e4494]
inc dword [eax]
mov eax, dword [0x4e474c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c0]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x4daf62
mov edx, 0x4db01c
lea eax, [ebp - 0x190]
call fcn.00403894
mov eax, dword [ebp - 0xc]
mov edx, eax
lea eax, [ebp - 0x190]
mov cl, 0x1e
call fcn.00403864
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x1b0]
call fcn.00403894
mov edx, 0x4dafe0
lea eax, [ebp - 0x1b0]
mov cl, 0x1f
call fcn.00403864
lea edx, [ebp - 0x1b0]
lea eax, [ebp - 0x1e4]
call fcn.00403894
mov eax, dword [ebp - 0xc]
lea edx, [eax + 0xb]
lea eax, [ebp - 0x1e4]
mov cl, 0x33
call fcn.00403864
lea edx, [ebp - 0x1e4]
lea eax, [ebp - 0x170]
call fcn.004053fc
mov eax, dword [ebp - 0x170]
call fcn.004d7ac8
jmp 0x4daf62
mov eax, dword [0x4e47a0]
inc dword [eax]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4dafb9
lea eax, [ebp - 0x170]
mov edx, 6
call fcn.004051bc
lea eax, [ebp - 0xd8]
mov edx, 3
call fcn.004051bc
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.004051bc
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004051bc
lea eax, [ebp - 8]
call fcn.00405198
ret