Function at 0x4b1aec
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
lea edi, [ebp - 4]
xor eax, eax
push ebp
push 0x4b1db1
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf8]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 8]
mov eax, dword [edi]
call fcn.00492a94
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, 1
mov ecx, dword [eax]
call dword [ecx + 0x14]
test al, al
je 0x4b1bc2
mov eax, dword [ebp - 8]
movzx eax, word [eax]
sub ax, 0x1b
je 0x4b1ba7
add eax, 0xfffffffb
sub ax, 0xffe0
jae 0x4b1bc2
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x20]
mov ebx, eax
lea edx, [ebp - 0x2c]
mov eax, ebx
call fcn.00459ed0
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
call dword [edx + 0x24]
test al, al
jne 0x4b1b8a
mov eax, dword [ebp - 8]
mov word [eax], 0
jmp 0x4b1bc2
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x20]
mov ebx, eax
lea edx, [ebp - 0x30]
mov eax, ebx
call fcn.00459ed0
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x2c]
jmp 0x4b1bc2
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x20]
mov ebx, eax
lea edx, [ebp - 0x34]
mov eax, ebx
call fcn.00459ed0
mov eax, dword [ebp - 0x34]
mov edx, dword [eax]
call dword [edx + 0x28]
mov eax, dword [edi]
cmp byte [eax + 0x280], 0
je 0x4b1d83
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [edi]
sub eax, dword [edx + 0x290]
mov edx, dword [edi]
cmp eax, dword [edx + 0x2f0]
jb 0x4b1bf4
mov eax, dword [edi]
add eax, 0x28c
call fcn.0040900c
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [edi]
mov dword [edx + 0x290], eax
mov eax, dword [ebp - 8]
movzx eax, word [eax]
cmp ax, 8
je 0x4b1cda
mov eax, dword [ebp - 8]
movzx eax, word [eax]
cmp ax, 0xd800
jb 0x4b1c23
cmp ax, 0xdfff
jbe 0x4b1c27
xor eax, eax
jmp 0x4b1c29
mov al, 1
test al, al
je 0x4b1c97
push 1
push 0x102
push 0x102
mov eax, dword [edi]
call fcn.00493d8c
push eax
lea eax, [ebp - 0x28]
push eax
call sub.user32.dll_PeekMessageW
test eax, eax
je 0x4b1d1e
mov eax, dword [edi]
push dword [eax + 0x28c]
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 8]
movzx edx, word [edx]
call fcn.00409ea4
push dword [ebp - 0x38]
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x20]
call fcn.00409ea4
push dword [ebp - 0x3c]
mov eax, dword [edi]
add eax, 0x28c
mov edx, 3
call fcn.0040a170
mov eax, dword [ebp - 8]
mov word [eax], 0
jmp 0x4b1d1e
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 8]
movzx edx, word [edx]
call fcn.00409ea4
mov edx, dword [ebp - 0x40]
mov eax, dword [edi]
add eax, 0x28c
call fcn.0040a090
jmp 0x4b1d1e
mov eax, dword [edi]
mov ebx, dword [eax + 0x28c]
test ebx, ebx
je 0x4b1cc7
sub ebx, 4
mov ebx, dword [ebx]
mov eax, dword [edi]
add eax, 0x28c
mov ecx, 1
mov edx, ebx
call fcn.0040a300
mov eax, dword [edi]
mov eax, dword [eax + 0x28c]
call fcn.004094fc
mov edx, eax
mov eax, dword [edi]
mov eax, dword [eax + 0x28c]
call fcn.00429938
cmp al, 2
je 0x4b1cb6
mov eax, dword [edi]
mov eax, dword [eax + 0x28c]
test eax, eax
je 0x4b1d0b
sub eax, 4
mov eax, dword [eax]
mov edx, dword [edi]
add edx, 0x28c
mov ecx, 1
xchg edx, eax
call fcn.0040a300
mov eax, dword [edi]
mov eax, dword [eax + 0x28c]
test eax, eax
je 0x4b1d2f
sub eax, 4
mov eax, dword [eax]
test eax, eax
jle 0x4b1d3c
push ebp
call fcn.004b1a04
pop ecx
jmp 0x4b1d53
xor edx, edx
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0xfc]
mov eax, dword [edi]
mov si, 0xffec
call fcn.004076ec
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0xf8]
cmp eax, dword [ebp - 0xc]
je 0x4b1d83
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, 3
mov ecx, dword [eax]
call dword [ecx + 0x14]
test al, al
je 0x4b1d83
mov eax, dword [edi]
mov edx, dword [eax]
call dword [edx + 0x20]
call fcn.00459f78
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b1db8
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.0040906c
lea eax, [ebp - 0x34]
mov edx, dword [0x44532c]
mov ecx, 3
call fcn.0040a8b8
ret