Function at 0x1004950b
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x4c
mov eax, dword [0x100a609c]
xor eax, esp
mov dword [esp + 0x48], eax
push ebx
mov ebx, dword [0x307809c]
push esi
xor esi, esi
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], esi
cmp ebx, esi
je 0x10049c60
call fcn.10073c2d
mov edx, dword [ebx + 0x1d20]
mov ecx, 0xe23bd4
mov eax, edx
mov dword [esp + 0x30], edx
call fcn.10006651
mov edi, eax
cmp edi, esi
je 0x100495cc
cmp dword [edi + 0x3b0], 0x270f
jg 0x10049587
push 0xffff
call fcn.1003a32b
pop ecx
jmp 0x10049c60
push edi
call fcn.10047c0d
mov eax, dword [edi]
mov esi, dword [edi + 0x10a8]
fld dword [esi + 0x280]
mov dword [esp + 0x2c], eax
mov eax, dword [edi + 0x3c0]
pop ecx
mov dword [esp + 0x20], eax
call fcn.100840a0
fld dword [esi + 0x288]
mov dword [esp + 0x10], eax
call fcn.100840a0
mov dword [esp + 0x14], eax
movzx eax, word [edi + 0x14]
mov dword [esp + 0x18], eax
jmp 0x100495f9
cmp dword [0x103d20c0], esi
je 0x100495f9
cmp dword [0x1035ff94], 1
jne 0x100495f9
cmp dword [0x103d3a24], esi
jne 0x100495f9
mov ecx, 0xe26ae0
mov eax, edx
call fcn.10006651
test eax, eax
jne 0x10049c60
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [0x103d8ab0]
cmp eax, 0x7530
jb 0x100496dc
cmp dword [0x103c88b8], 1
jne 0x100496dc
call esi
push dword [0x103c88bc]
mov dword [0x103d8ab0], eax
call fcn.10038f5c
pop ecx
mov dword [0x103c2494], eax
test eax, eax
je 0x100496dc
mov eax, dword [0x10114474]
add eax, 0x45
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_KillTimer]
mov esi, dword [0x103c2494]
fld dword [esi]
call fcn.100840a0
fld dword [esi + 8]
mov dword [0x103c2498], eax
call fcn.100840a0
mov dword [0x103c249c], eax
mov eax, dword [esi + 0x20]
mov dword [0x103c24a0], eax
mov eax, dword [0x10114474]
push fcn.10039b97
push 0x12c
add eax, 0x46
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
xor eax, eax
push eax
push eax
push eax
push eax
mov dword [0x10112bfc], eax
mov dword [0x10112788], 1
mov dword [0x1035ff78], eax
mov dword [0x1035ff7c], eax
mov dword [0x1035ff80], eax
mov dword [0x101127c4], 4
call fcn.10039b97
push 0x10099680
call fcn.100060db
jmp 0x10049581
or dword [0x1035fee0], 0xffffffff
cmp dword [0x103c3ea4], 1
jne 0x100497a7
fld dword [0x1035fdc8]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1035fdc4]
fstp dword [esp + 8]
fld dword [ebx + 0x1f74]
fstp dword [esp + 4]
fld dword [ebx + 0x1f6c]
fstp dword [esp]
call fcn.100063eb
fcomp qword [0x1009ef30]
add esp, 0x10
fnstsw ax
test ah, 0x41
jne 0x100497a7
mov eax, dword [0x10114474]
add eax, 0x45
push eax
push dword [0x100dfd8c]
mov dword [ebx + 0x1d20], 0xffff
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x10114474]
push fcn.10049e0e
push 0x12c
add eax, 0x4d
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
fld dword [0x1035fdc8]
and dword [0x10112bfc], 0
sub esp, 0xc
fstp dword [esp + 8]
mov dword [0x10112788], 1
fldz
fstp dword [esp + 4]
fld dword [0x1035fdc4]
fstp dword [esp]
call fcn.1003a670
add esp, 0xc
jmp 0x10049c60
call fcn.10049476
call fcn.10049f0e
mov ecx, dword [0x103c3ea0]
inc ecx
cmp eax, ecx
jge 0x100497ed
mov eax, dword [0x10114474]
add eax, 0x45
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x10114474]
push 0x10049dac
push 0xa
add eax, 0x46
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
fild dword [esp + 0x14]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x20]
fstp dword [esp + 8]
fld dword [ebx + 0x1f74]
fstp dword [esp + 4]
fld dword [ebx + 0x1f6c]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
call fcn.100840a0
cmp dword [0x103c5428], 1
mov dword [esp + 0x24], eax
jne 0x10049950
xor eax, eax
mov dword [esp + 0x10], 0x270f
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], eax
cmp dword [0x103ccd94], eax
jle 0x1004990d
mov ecx, dword [esp + 0x18]
mov esi, eax
mov eax, dword [0x103cd52c]
mov eax, dword [eax + esi*4]
cmp dword [eax], ecx
je 0x10049905
mov eax, dword [0x103ccd8c]
mov eax, dword [eax + esi*4]
cmp dword [eax], 0x2c
jne 0x100498ee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103cdf24]
mov ecx, dword [ecx + esi*4]
sub eax, dword [ecx]
cmp eax, 0x1388
ja 0x100498ee
mov eax, dword [0x103cd52c]
push dword [esp + 0x10]
mov eax, dword [eax + esi*4]
push dword [eax]
call fcn.10049410
pop ecx
pop ecx
mov esi, eax
xor ecx, ecx
mov eax, 0x1035fdf8
cmp dword [eax], esi
je 0x100498b8
add eax, 4
cmp eax, 0x1035fe70
jl 0x100498a8
jmp 0x100498bb
xor ecx, ecx
inc ecx
test esi, esi
jle 0x100498ee
cmp ecx, 1
jne 0x100498ee
mov ecx, 0xe23bd4
mov eax, esi
call fcn.10006651
mov edi, eax
test edi, edi
je 0x100498ee
fld dword [edi + 0x35c]
call fcn.100840a0
cmp eax, 0x1e
jg 0x100498ee
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, dword [0x103ccd94]
jl 0x1004984f
jmp 0x1004990d
mov dword [esp + 0x10], 0x270f
mov eax, dword [esp + 0x10]
cmp eax, dword [0x1035fde8]
jg 0x10049950
mov edx, dword [esp + 0x14]
call fcn.1003acff
mov ecx, dword [0x103c54e0]
push 0
dec ecx
call fcn.1003a960
pop ecx
push dword [esp + 0x14]
mov esi, 0x10112128
push 0x10098f7c
push esi
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
push esi
call fcn.100060db
pop ecx
cmp dword [esp + 0x20], 1
je 0x10049b9e
cmp dword [esp + 0x30], 0xffff
je 0x10049b9e
cmp dword [esp + 0x24], 0x1e
jg 0x10049b9e
test edi, edi
je 0x10049b9e
mov ebx, dword [ebx + 0x2a60]
cmp ebx, 8
je 0x1004999a
cmp ebx, 9
je 0x1004999a
cmp ebx, 0xb
je 0x1004999a
cmp ebx, 0xd
jne 0x10049a7a
and dword [esp + 0x10], 0
cmp dword [0x103d7288], 0
jle 0x10049a7a
mov ebx, dword [sym.imp.MSVCR100.dll_strcmp]
xor edi, edi
mov dword [esp + 0x1c], edi
lea esi, [esp + 0x34]
mov ecx, edi
call fcn.10006348
mov eax, dword [0x103d7280]
mov ecx, dword [esp + 0x10]
push dword [eax + ecx*4]
mov eax, esi
push eax
call ebx
pop ecx
pop ecx
test eax, eax
jne 0x10049a58
xor esi, esi
cmp dword [esp + 0x4c], esi
jne 0x10049a58
lea eax, [esp + 0x34]
push 0x10098f98
push eax
call ebx
pop ecx
pop ecx
test eax, eax
je 0x10049a94
lea eax, [esp + 0x34]
push 0x10098f90
push eax
call ebx
pop ecx
pop ecx
test eax, eax
jne 0x10049b8a
cmp dword [0x103ccd94], esi
jle 0x10049a58
mov eax, dword [0x103cd52c]
mov eax, dword [eax + esi*4]
mov ecx, dword [esp + 0x18]
cmp dword [eax], ecx
jne 0x10049a4f
mov eax, dword [0x103ccd8c]
mov eax, dword [eax + esi*4]
cmp dword [eax], 0x2c
jne 0x10049a4f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103cdf24]
mov ecx, dword [ecx + esi*4]
sub eax, dword [ecx]
cmp eax, 0x1388
jbe 0x10049b8a
inc esi
cmp esi, dword [0x103ccd94]
jl 0x10049a16
inc edi
mov dword [esp + 0x1c], edi
cmp edi, 0x14
jl 0x100499b8
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, dword [0x103d7288]
jl 0x100499b2
mov ecx, dword [0x103c54e0]
push 0
dec ecx
call fcn.1003a960
or dword [0x100a62a0], 0xffffffff
jmp 0x10049c3a
mov dword [esp + 0x18], esi
mov dword [esp + 0x20], esi
mov ebx, 0x1035fdf8
mov eax, dword [ebx]
test eax, eax
jle 0x10049b5f
mov ecx, 0xe23bd4
call fcn.10006651
mov esi, eax
test esi, esi
je 0x10049b5f
mov edi, dword [esi + 0x10a8]
fld dword [edi + 0x280]
call fcn.100840a0
fld dword [edi + 0x288]
mov dword [esp + 0x10], eax
call fcn.100840a0
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x20]
fstp dword [esp + 8]
fld dword [eax + 0x1f74]
fstp dword [esp + 4]
fld dword [eax + 0x1f6c]
fstp dword [esp]
call fcn.100063eb
fcomp dword [0x1009ef28]
add esp, 0x10
fnstsw ax
test ah, 5
jp 0x10049b5b
mov ecx, dword [esi + 0x5f4]
mov dword [esp + 0x24], ecx
cmp ecx, dword [esp + 0x20]
jle 0x10049b5b
fild dword [esp + 0x24]
fidiv dword [esi + 0x614]
fstp dword [esp + 0x24]
fld dword [esp + 0x24]
fcomp qword [0x1009ef20]
fnstsw ax
test ah, 1
jne 0x10049b5b
mov eax, dword [ebx]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], eax
mov edi, dword [esp + 0x1c]
add ebx, 4
cmp ebx, 0x1035fe70
jl 0x10049aa1
mov edx, dword [esp + 0x18]
test edx, edx
je 0x10049b8a
call fcn.1003acff
mov ecx, dword [0x103c54e0]
push 0
dec ecx
call fcn.1003a960
pop ecx
push 0xb
mov ecx, edi
call fcn.1003a960
mov dword [0x100a62a0], edi
jmp 0x10049c3a
xor edi, edi
mov eax, dword [edi*4 + 0x1035fdf8]
test eax, eax
jle 0x10049c18
mov ecx, 0xe23bd4
call fcn.10006651
test eax, eax
je 0x10049c18
mov esi, dword [eax + 0x10a8]
fld dword [esi + 0x280]
call fcn.100840a0
fld dword [esi + 0x288]
mov dword [esp + 0x10], eax
call fcn.100840a0
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x20]
fstp dword [esp + 8]
fld dword [ebx + 0x1f74]
fstp dword [esp + 4]
fld dword [ebx + 0x1f6c]
fstp dword [esp]
call fcn.100063eb
fcomp qword [0x1009ee48]
add esp, 0x10
fnstsw ax
test ah, 5
jnp 0x10049c20
inc edi
cmp edi, 0x1e
jl 0x10049ba0
jmp 0x10049c3b
mov edx, dword [edi*4 + 0x1035fdf8]
call fcn.1003acff
mov ecx, dword [0x103c54e0]
push 0
dec ecx
call fcn.1003a960
pop ecx
xor eax, eax
inc eax
cmp dword [0x103c3d18], eax
jne 0x10049c60
cmp dword [esp + 0x28], 0xe23bd4
jne 0x10049c60
mov dword [0x1035ff48], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1035fd8c], eax
mov ecx, dword [esp + 0x54]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1008344f
mov esp, ebp
pop ebp
ret 0x10