Function at 0x4fca0c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], eax
mov ecx, 7
lea eax, [ebp - 0x20]
mov edx, dword [0x4010ac]
call fcn.004071ec
xor eax, eax
push ebp
push 0x4fd344
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x50c17c], 0
je 0x4fca5d
xor eax, eax
call fcn.004e06f4
mov byte [ebp - 0x21], 0
mov eax, dword [0x504d6c]
mov eax, dword [eax]
shr eax, 0x10
cmp eax, 0x600
mov eax, dword [0x5049c8]
setae byte [eax]
xor edx, edx
push ebp
push 0x4fd285
push dword fs:[edx]
mov dword fs:[edx], esp
cmp dword [0x50c18c], 0
je 0x4fca9b
mov dl, 1
mov eax, dword [0x50c18c]
call fcn.004b1ea0
cmp byte [0x50c17a], 0
je 0x4fcb08
xor eax, eax
push ebp
push 0x4fcadb
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x50c180], 0
jne 0x4fcac7
mov eax, 0x4fd360
call fcn.004b2988
jmp 0x4fcad1
mov eax, dword [0x50c180]
call fcn.004b2b6c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fcb08
mov eax, 0x4fd3c8
call fcn.004b2bc8
lea eax, [ebp - 0x2c]
mov ecx, dword [0x50c164]
mov edx, 0x4fd42c
call fcn.00406914
mov eax, dword [ebp - 0x2c]
call fcn.004b2bc8
lea eax, [ebp - 0x30]
mov ecx, dword [0x50c168]
mov edx, 0x4fd46c
call fcn.00406914
mov eax, dword [ebp - 0x30]
call fcn.004b2bc8
lea eax, [ebp - 0x38]
call fcn.0047f17c
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x34]
mov edx, 0x4fd498
call fcn.00406914
mov eax, dword [ebp - 0x34]
call fcn.004b2bc8
call fcn.004e07bc
xor eax, eax
call fcn.004fc338
mov dword [0x50c170], eax
mov dl, 1
mov eax, dword [0x4fb660]
call fcn.004b5a84
mov dword [0x504978], eax
mov ecx, dword [0x50c168]
mov edx, dword [0x50c170]
mov eax, dword [0x504978]
call fcn.004b86a8
lea ecx, [ebp - 0x3c]
mov eax, dword [0x504978]
mov edx, dword [eax + 0x18]
mov al, 0xb7
call fcn.004abb3c
mov edx, dword [ebp - 0x3c]
mov eax, 0x50c174
call fcn.00406448
mov eax, dword [0x504978]
test byte [eax + 0x1d], 0x20
je 0x4fcc03
mov eax, dword [0x504aa8]
cmp byte [eax], 0
jne 0x4fcc03
push 1
push 1
mov eax, dword [0x50c174]
call fcn.004064d4
push eax
mov eax, dword [0x504e48]
mov eax, dword [eax + 0x2fc]
call fcn.004064d4
mov ecx, 0x30
pop edx
call fcn.004e10a4
call fcn.0041191c
mov eax, dword [0x504978]
test byte [eax + 0x1d], 1
je 0x4fcc46
call fcn.0048022c
test al, al
jne 0x4fcc46
push 1
push 1
mov eax, dword [0x50c174]
call fcn.004064d4
push eax
mov eax, dword [0x504e48]
mov eax, dword [eax + 0x1dc]
call fcn.004064d4
mov ecx, 0x30
pop edx
call fcn.004e10a4
call fcn.0041191c
mov eax, dword [0x50c170]
xor edx, edx
mov dword [0x50c170], edx
call fcn.00404098
mov al, 2
call fcn.004fc338
mov dword [0x50c170], eax
lea eax, [ebp - 0x20]
push eax
push 6
mov ecx, 0x85050900
mov dx, 0x20
mov eax, dword [0x504978]
call fcn.004b5f50
test al, al
jne 0x4fcc8b
mov eax, 0x4fd4d8
call fcn.004adae0
cmp dword [0x50c18c], 0
je 0x4fcca6
lea eax, [ebp - 4]
mov edx, dword [0x504d18]
mov edx, dword [edx]
call fcn.0040532c
jmp 0x4fccb1
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x20]
call fcn.004fc9ac
mov eax, dword [0x504978]
cmp byte [eax + 0x10], 0
je 0x4fccd9
mov eax, dword [0x504aa8]
cmp byte [eax], 0
jne 0x4fccd0
mov eax, 0x4fd570
call fcn.004adae0
mov al, 1
call fcn.004e1594
jmp 0x4fcce0
xor eax, eax
call fcn.004e1594
call fcn.004de8ac
cmp dword [ebp - 4], 0
je 0x4fcde8
call fcn.004de288
call fcn.004debe4
mov eax, dword [0x5049d8]
mov edx, dword [0x50c164]
call fcn.00406448
mov eax, dword [0x504dac]
mov edx, dword [0x504978]
mov edx, dword [edx + 0x14]
call fcn.00406448
movzx eax, byte [0x50c17b]
or al, byte [0x50c17c]
mov edx, dword [0x504b38]
mov byte [edx], al
mov eax, dword [0x504fa4]
mov edx, dword [ebp - 0x18]
call fcn.00406448
mov eax, dword [0x504c60]
mov edx, dword [ebp - 0x14]
call fcn.00406448
mov eax, dword [0x504ac4]
mov edx, dword [ebp - 0x10]
call fcn.00406448
mov eax, dword [0x504b64]
mov edx, dword [ebp - 0xc]
call fcn.00406448
mov eax, dword [ebp - 8]
test eax, eax
je 0x4fcd71
sub eax, 4
mov eax, dword [eax]
mov edx, eax
add edx, edx
mov eax, dword [ebp - 8]
call fcn.004fc8f4
mov dl, 1
mov eax, dword [0x4f966c]
call fcn.004f9e84
mov edx, dword [0x504b88]
mov dword [edx], eax
mov eax, 0x4e0194
mov edx, dword [0x504b88]
mov edx, dword [edx]
mov dword [edx + 0xc], eax
mov eax, 0x4e03ac
mov edx, dword [0x504b88]
mov edx, dword [edx]
mov dword [edx + 0x10], eax
mov eax, 0x4e03b8
mov edx, dword [0x504b88]
mov edx, dword [edx]
mov dword [edx + 0x14], eax
mov eax, 0x4e03c4
mov edx, dword [0x504b88]
mov edx, dword [edx]
mov dword [edx + 0x18], eax
mov ecx, dword [0x504c24]
mov ecx, dword [ecx]
mov eax, dword [0x504b88]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.004f9f7c
xor edx, edx
push ebp
push 0x4fd231
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x4fd164
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x504b88]
cmp dword [eax], 0
je 0x4fce77
xor edx, edx
push ebp
push 0x4fce4b
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
push 0
push 1
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x504b88]
mov eax, dword [eax]
mov edx, 0x4fd604
call fcn.004fa138
pop dword fs:[0]
add esp, 8
jmp 0x4fce64
test al, al
jne 0x4fce77
mov eax, 0x4fd694
call fcn.004b2bc8
call fcn.0041191c
cmp byte [0x50c17b], 0
jne 0x4fceb1
cmp byte [0x50c17c], 0
jne 0x4fceb1
push 0x124
push 1
push 6
mov eax, dword [0x504978]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x50c174]
mov al, 0x27
call fcn.004fba44
cmp eax, 6
je 0x4fceb1
call fcn.0041191c
xor edx, edx
xor eax, eax
call fcn.004fc1ac
jmp 0x4fcedf
push 0x31
push 1
push 2
mov eax, dword [0x504978]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x50c174]
mov al, 0xbd
call fcn.004fba44
dec eax
je 0x4fcedf
call fcn.0041191c
mov eax, dword [0x504978]
call fcn.004b5fa4
test al, al
jne 0x4fcebc
jmp 0x4fcf02
push 0xa
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x504e38]
mov eax, dword [eax]
call fcn.0047c3a8
mov eax, dword [0x505020]
cmp byte [eax], 0
jne 0x4fceef
mov eax, dword [0x5049c8]
mov byte [eax], 0
lea ecx, [ebp - 0x48]
mov eax, dword [0x504978]
mov edx, dword [eax + 0x18]
mov al, 0xa7
call fcn.004abb3c
mov edx, dword [ebp - 0x48]
mov eax, dword [0x504e38]
mov eax, dword [eax]
mov eax, dword [eax + 0x170]
call fcn.00480a80
call fcn.004fb888
xor edx, edx
mov al, 1
call fcn.004fc1ac
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 0x28], eax
mov eax, dword [0x504978]
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x24], edx
mov ecx, 0x4fbcc8
mov dl, 1
mov eax, dword [0x504978]
call fcn.004b6d74
mov byte [ebp - 0x22], al
movzx eax, byte [ebp - 0x22]
mov edx, dword [0x504d60]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea edx, [ebp - 0x44]
xor ecx, ecx
mov eax, 0x4fd6fc
call fcn.004b2e4c
mov eax, dword [0x504978]
cmp byte [eax + 0x1c], 0
jne 0x4fcfad
mov eax, dword [0x504978]
test byte [eax + 0x1d], 8
jne 0x4fcfad
xor eax, eax
jmp 0x4fcfaf
mov al, 1
mov byte [ebp - 0x23], al
mov eax, dword [0x504b88]
cmp dword [eax], 0
je 0x4fd04d
mov eax, dword [0x504b88]
mov eax, dword [eax]
mov edx, 0x4fd728
call fcn.004fa028
test al, al
je 0x4fd04d
cmp byte [ebp - 0x23], 0
jne 0x4fd043
xor eax, eax
push ebp
push 0x4fd028
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 0
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x504b88]
mov eax, dword [eax]
mov edx, 0x4fd728
call fcn.004fa138
test al, al
je 0x4fd01e
mov byte [ebp - 0x23], 1
mov eax, 0x4fd74c
call fcn.004b2bc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fd04d
mov eax, 0x4fd82c
call fcn.004b2bc8
movzx eax, byte [ebp - 0x23]
mov edx, dword [0x504d60]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea edx, [ebp - 0x44]
xor ecx, ecx
mov eax, 0x4fd8e4
call fcn.004b2e4c
cmp byte [0x50c17c], 0
jne 0x4fd0a8
mov eax, dword [0x504e38]
mov eax, dword [eax]
call fcn.0047c3a8
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [ebp - 0x28]
cmp eax, 0x3e8
jae 0x4fd0a8
push 0xff
push 0xa
push 0
push 0
push 0
call sub.user32.dll_MsgWaitForMultipleObjects
jmp 0x4fd079
mov eax, dword [0x504ad8]
mov eax, dword [eax]
mov edx, dword [0x504ad8]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00404098
mov dl, 1
mov al, 2
call fcn.004fc1ac
cmp byte [ebp - 0x23], 0
jne 0x4fd108
cmp byte [0x50c17b], 0
jne 0x4fd151
cmp byte [0x50c17c], 0
jne 0x4fd151
push 0x10040
push 1
push 1
mov eax, dword [0x504978]
mov edx, dword [eax + 0x18]
movzx eax, byte [ebp - 0x22]
movzx eax, byte [eax + 0x504984]
mov ecx, dword [0x50c174]
call fcn.004fba44
jmp 0x4fd151
cmp byte [0x50c17d], 0
jne 0x4fd141
cmp byte [0x50c17c], 0
jne 0x4fd13d
push 0x10024
push 1
push 6
mov eax, dword [0x504978]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x50c174]
mov al, 0xbb
call fcn.004fba44
cmp eax, 6
jne 0x4fd141
mov byte [ebp - 0x21], 1
cmp byte [ebp - 0x21], 0
jne 0x4fd151
mov eax, 0x4fd928
call fcn.004b2bc8
mov dl, 1
mov al, 3
call fcn.004fc1ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fd178
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4fd23b
xor edx, edx
push ebp
push 0x4fd1b3
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x504ad8]
mov eax, dword [eax]
mov edx, dword [0x504ad8]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00404098
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fd1c2
mov eax, dword [0x504b88]
cmp dword [eax], 0
je 0x4fd21e
xor eax, eax
push ebp
push 0x4fd205
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x504b88]
mov eax, dword [eax]
mov edx, 0x4fd984
call fcn.004fa084
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fd21e
mov eax, dword [0x504e38]
mov eax, dword [eax]
mov eax, dword [eax + 0x170]
call fcn.00480b10
ret