Function at 0x4df720
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
mov eax, dword [0x57a040]
xor eax, esp
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 8]
mov ecx, 0x9f436c
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov dword [esp + 0x14], eax
lea eax, [esp + 0x24]
mov edi, dword [ebx*4 + 0x20a514c]
push eax
lea eax, [esp + 0x1c]
push eax
movzx esi, byte [edi + 0x149]
mov dword [esp + 0x2c], esi
call fcn.00405650
mov eax, dword [esp + 0x20]
mov ecx, dword [0x9f436c]
cmp byte [eax + 0xd], 0
jne 0x4df77c
cmp esi, dword [eax + 0x10]
jge 0x4df77e
mov eax, ecx
cmp eax, ecx
je 0x4dfc7e
cmp dword [eax + 0x5c], 0
je 0x4dfc7e
test ebx, ebx
js 0x4dfc7e
cmp ebx, 0x1194
jge 0x4dfc7e
cmp dword [edi + 4], 3
jne 0x4dfc7e
movzx eax, word [edi + 0x78]
cmp eax, 1
je 0x4df7c0
cmp eax, 6
jne 0x4dfc7e
cmp byte [edi + 0xa], 0
jg 0x4dfc7e
cmp byte [edi + 0x9c0], 0
jne 0x4dfc7e
mov eax, dword [esp + 0x14]
movzx ecx, byte [eax + 3]
movzx eax, byte [eax + 4]
shl ecx, 8
or ecx, eax
mov dword [esp + 0xc], ecx
cmp ecx, 0x1194
jae 0x4dfc7e
mov esi, dword [ecx*4 + 0x20a514c]
mov dword [esp + 0x24], esi
cmp dword [esi + 4], 3
jne 0x4dfc7e
movzx eax, word [esi + 0x78]
cmp eax, 1
je 0x4df81f
cmp eax, 6
jne 0x4dfc7e
cmp byte [esi + 0xa], 0
jg 0x4dfc7e
cmp byte [esi + 0x9c0], 0
jne 0x4dfc7e
test byte [edi + 0x384], 3
jne 0x4dfc7e
test byte [esi + 0x384], 3
jne 0x4dfc7e
cmp byte [edi + 0x216], 0
jne 0x4dfc7e
cmp byte [edi + 0x214], 0
jne 0x4dfc7e
cmp byte [esi + 0x216], 0
jne 0x4dfc7e
cmp byte [esi + 0x214], 0
jne 0x4dfc7e
movzx eax, byte [esi + 0x149]
mov ecx, 0x9f436c
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.00405650
mov eax, dword [esp + 0x20]
cmp byte [eax + 0xd], 0
jne 0x4df8be
mov ecx, dword [esp + 0x14]
cmp ecx, dword [eax + 0x10]
jl 0x4df8be
mov ecx, dword [0x9f436c]
jmp 0x4df8c6
mov ecx, dword [0x9f436c]
mov eax, ecx
cmp eax, ecx
je 0x4dfc69
cmp dword [eax + 0x5c], 0
je 0x4dfc69
mov al, byte [esi + 0x149]
cmp al, 0x28
je 0x4dfc69
cmp al, 0x12
jb 0x4df926
cmp al, 0x17
jbe 0x4dfc69
cmp al, 0x35
je 0x4dfc69
cmp al, 0x2d
jb 0x4df926
cmp al, 0x32
jbe 0x4dfc69
cmp al, 0x40
je 0x4dfc69
cmp al, 0x41
jb 0x4df926
cmp al, 0x44
jbe 0x4dfc69
cmp al, 0x45
jb 0x4df926
cmp al, 0x48
jbe 0x4dfc69
mov eax, dword [edi + 0x288]
test eax, eax
js 0x4df93b
cmp eax, 0x1194
jl 0x4dfc69
mov eax, dword [esi + 0x288]
test eax, eax
js 0x4df950
cmp eax, 0x1194
jl 0x4dfc69
cmp dword [0xbdac3c], 0
je 0x4df974
mov eax, dword [edi + 0x758]
cmp eax, dword [esi + 0x758]
je 0x4df974
mov dword [esp + 0xc], 0x64104c1
jmp 0x4dfc71
push esi
push edi
mov ecx, 0xb94b00
call fcn.004df490
test al, al
jne 0x4dfc7e
mov eax, dword [ebx*4 + 0x20a514c]
xor edx, edx
xor esi, esi
mov ecx, dword [eax + 0x284]
test ecx, ecx
js 0x4dfac7
imul ecx, ecx, 0x2c
mov eax, dword [ecx + 0xb94b0c]
cmp eax, 0xffffffff
je 0x4df9c2
mov eax, dword [eax*4 + 0x20a514c]
mov esi, 1
movsx edx, word [eax + 0xd0]
mov eax, dword [ecx + 0xb94b10]
cmp eax, 0xffffffff
je 0x4df9de
mov eax, dword [eax*4 + 0x20a514c]
movsx eax, word [eax + 0xd0]
add edx, eax
inc esi
mov eax, dword [ecx + 0xb94b14]
cmp eax, 0xffffffff
je 0x4df9fa
mov eax, dword [eax*4 + 0x20a514c]
movsx eax, word [eax + 0xd0]
add edx, eax
inc esi
mov eax, dword [ecx + 0xb94b18]
cmp eax, 0xffffffff
je 0x4dfa16
mov eax, dword [eax*4 + 0x20a514c]
movsx eax, word [eax + 0xd0]
add edx, eax
inc esi
mov eax, dword [ecx + 0xb94b1c]
cmp eax, 0xffffffff
je 0x4dfa32
mov eax, dword [eax*4 + 0x20a514c]
movsx eax, word [eax + 0xd0]
add edx, eax
inc esi
mov eax, dword [ecx + 0xb94b20]
cmp eax, 0xffffffff
je 0x4dfa4e
mov eax, dword [eax*4 + 0x20a514c]
movsx eax, word [eax + 0xd0]
add edx, eax
inc esi
mov eax, dword [ecx + 0xb94b24]
cmp eax, 0xffffffff
je 0x4dfa6a
mov eax, dword [eax*4 + 0x20a514c]
movsx eax, word [eax + 0xd0]
add edx, eax
inc esi
mov eax, dword [ecx + 0xb94b28]
cmp eax, 0xffffffff
je 0x4dfa86
mov eax, dword [eax*4 + 0x20a514c]
movsx eax, word [eax + 0xd0]
add edx, eax
inc esi
mov eax, dword [ecx + 0xb94b2c]
cmp eax, 0xffffffff
je 0x4dfaa2
mov eax, dword [eax*4 + 0x20a514c]
movsx eax, word [eax + 0xd0]
add edx, eax
inc esi
mov ecx, dword [ecx + 0xb94b30]
cmp ecx, 0xffffffff
je 0x4dfabe
mov ecx, dword [ecx*4 + 0x20a514c]
movsx ecx, word [ecx + 0xd0]
add edx, ecx
inc esi
mov eax, edx
cdq
idiv esi
mov ecx, eax
jmp 0x4dface
movsx ecx, word [eax + 0xd0]
mov eax, dword [esp + 0xc]
mov esi, dword [eax*4 + 0x20a514c]
movsx edx, word [esi + 0xd0]
cmp ecx, edx
jle 0x4dfb2c
sub ecx, edx
mov edx, dword [0xbdad00]
cmp ecx, edx
jle 0x4dfb77
sub ecx, edx
lea eax, [esi + 0x86]
push ecx
push eax
push eax
push str.You_cant_create_party_with__s___s_need__d_more_levels_
push 0
push 0
push 0
push 0
push 0
push 1
push dword [edi]
push 0xb90558
call fcn.004cdc70
add esp, 0x30
mov dword [esp + 0xc], 0x54104c1
jmp 0x4dfc71
jge 0x4dfb77
mov eax, edx
sub eax, ecx
cmp eax, dword [0xbdad00]
jle 0x4dfb77
sub edx, dword [0xbdad00]
lea eax, [esi + 0x86]
sub edx, ecx
push edx
push eax
push str.You_cant_create_party_with__s__need__d_more_levels_
push 0
push 0
push 0
push 0
push 0
push 1
push dword [edi]
push 0xb90558
call fcn.004cdc70
add esp, 0x2c
mov dword [esp + 0xc], 0x54104c1
jmp 0x4dfc71
mov eax, dword [edi + 0x284]
test eax, eax
js 0x4dfba0
cmp eax, 0x1194
jge 0x4dfba0
imul eax, eax, 0x2c
cmp dword [eax + 0xb94b08], 0
je 0x4dfba0
cmp dword [eax + 0xb94b0c], ebx
jne 0x4dfc69
mov eax, dword [esp + 0x24]
test byte [eax + 0x3e4], 1
jne 0x4dfbba
mov dword [esp + 0xc], 0x14104c1
jmp 0x4dfc71
mov eax, dword [eax + 0x284]
test eax, eax
js 0x4dfbe4
cmp eax, 0x1194
jge 0x4dfbe4
imul eax, eax, 0x2c
cmp dword [eax + 0xb94b08], 0
je 0x4dfbe4
mov dword [esp + 0xc], 0x44104c1
jmp 0x4dfc71
mov eax, dword [edi + 0x384]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
and eax, 0xffff0081
or eax, 0x81
mov dword [edi + 0x384], eax
call esi
mov dword [edi + 0x388], eax
mov eax, dword [esp + 0xc]
mov word [edi + 0x2b0], ax
mov dword [edi + 0x288], eax
mov edi, dword [esp + 0x24]
mov eax, dword [edi + 0x384]
and eax, 0xffff0081
or eax, 0x81
mov dword [edi + 0x384], eax
call esi
mov dword [edi + 0x388], eax
mov eax, ebx
shr eax, 8
mov byte [esp + 0x27], al
lea eax, [esp + 0x24]
push 5
push eax
mov eax, dword [esp + 0x14]
mov word [edi + 0x2b0], bx
mov word [esp + 0x2c], 0x5c1
mov byte [esp + 0x2e], 0x40
mov byte [esp + 0x30], bl
push eax
jmp 0x4dfc79
mov dword [esp + 0xc], 0x4104c1
push 4
lea eax, [esp + 0x10]
push eax
push ebx
call fcn.005192f0
mov ecx, dword [esp + 0x2c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00529f01
mov esp, ebp
pop ebp
ret 8