Function at 0x527e6c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff78
push ebx
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0xc], eax
lea edx, [ebp - 0x54]
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.0050ca68
test al, al
je 0x527e97
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x88]
mov eax, dword [0x5865d0]
mov eax, dword [eax]
mov dx, 0x55
call fcn.0050d5c8
test al, al
je 0x527ebc
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [0x586a98]
mov eax, dword [eax]
cmp byte [eax + 0x141], 0
je 0x527ede
cmp dword [ebp - 0x10], 0
jle 0x527ede
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], 0
jne 0x527fa5
mov eax, dword [ebp - 4]
cmp dword [eax + 0xb8], 0
jne 0x527f7e
mov eax, dword [0x586a98]
mov eax, dword [eax]
mov edx, 0x528188
call fcn.00515890
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0xb8], ebx
test ebx, ebx
jne 0x527f32
mov eax, dword [0x586a98]
mov eax, dword [eax]
mov edx, 0x528198
call fcn.00515890
mov edx, dword [ebp - 4]
mov dword [edx + 0xb8], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0xb8], 0
jne 0x527f58
mov eax, dword [0x586a98]
mov eax, dword [eax]
mov edx, 0x5281a8
call fcn.00515890
mov edx, dword [ebp - 4]
mov dword [edx + 0xb8], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0xb8], 0
jne 0x527f7e
mov eax, dword [0x586a98]
mov eax, dword [eax]
mov edx, 0x5281b8
call fcn.00515890
mov edx, dword [ebp - 4]
mov dword [edx + 0xb8], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0xb8], 0
jle 0x527fa5
cmp dword [ebp - 0xc], 0
jle 0x527fa5
mov dword [ebp - 0x20], 1
mov eax, dword [0x586a98]
mov eax, dword [eax]
mov byte [eax + 0x17d], 0
cmp dword [ebp - 0x20], 0
jne 0x527fb8
cmp dword [ebp - 0x10], 0
jle 0x527fb8
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], 0
je 0x528175
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.0050edd8
movzx eax, ax
mov dword [ebp - 0x14], eax
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.0050fbe4
movzx eax, ax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 2
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.0050eb28
xor eax, eax
push ebp
push 0x528142
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004b9988
mov ebx, eax
jmp 0x52811b
call fcn.004b9988
sub eax, ebx
cmp eax, 0x2bc
ja 0x528128
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.0050bdb8
test al, al
jne 0x528128
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.00511ce0
test al, al
jne 0x528128
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.0050edd8
movzx eax, ax
cmp eax, dword [ebp - 0x14]
jne 0x528075
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.0050fbe4
movzx eax, ax
cmp eax, dword [ebp - 0x18]
je 0x52807e
mov byte [ebp - 5], 1
jmp 0x528128
cmp dword [ebp - 0x20], 2
jne 0x5280b9
mov eax, dword [0x5865d0]
mov eax, dword [eax]
mov dx, 0x55
call fcn.0050d8c8
cmp eax, dword [ebp - 0x10]
jge 0x5280a2
mov byte [ebp - 5], 1
jmp 0x528128
mov eax, dword [0x5865d0]
mov eax, dword [eax]
or ecx, 0xffffffff
mov edx, dword [ebp - 0x84]
call fcn.00511928
jmp 0x528114
mov eax, dword [0x586a98]
mov eax, dword [eax]
cmp byte [eax + 0x17d], 0
je 0x5280df
cmp dword [ebp - 0x10], 0
jle 0x5280df
mov dword [ebp - 0x20], 2
call fcn.004b9988
mov ebx, eax
jmp 0x52811b
lea edx, [ebp - 0x54]
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.0050ca68
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x48]
jle 0x5280fc
mov byte [ebp - 5], 1
jmp 0x528128
mov eax, dword [ebp - 4]
movzx edx, byte [eax + 0xb8]
mov eax, dword [0x5865d0]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00511884
push 0x28
call sub.kernel32.dll_Sleep_2
mov eax, dword [ebp - 4]
cmp byte [eax + 0xd], 0
je 0x528013
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x528149
mov eax, dword [0x5865d0]
mov eax, dword [eax]
call fcn.0051163c
ret
movzx eax, byte [ebp - 5]
pop ebx
mov esp, ebp
pop ebp
ret