Function at 0x511dcc
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], eax
mov ecx, 7
lea eax, [ebp - 0x20]
mov edx, dword [0x4010ac]
call fcn.004071ec
xor eax, eax
push ebp
push 0x512704
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x55f184], 0
je 0x511e1d
xor eax, eax
call fcn.004f42ac
mov byte [ebp - 0x21], 0
mov eax, dword [0x557da0]
mov eax, dword [eax]
shr eax, 0x10
cmp eax, 0x600
mov eax, dword [0x5579f4]
setae byte [eax]
xor edx, edx
push ebp
push 0x512645
push dword fs:[edx]
mov dword fs:[edx], esp
cmp dword [0x55f194], 0
je 0x511e5b
mov dl, 1
mov eax, dword [0x55f194]
call fcn.004c482c
cmp byte [0x55f182], 0
je 0x511ec8
xor eax, eax
push ebp
push 0x511e9b
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x55f188], 0
jne 0x511e87
mov eax, 0x512720
call fcn.004c5314
jmp 0x511e91
mov eax, dword [0x55f188]
call fcn.004c54f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x511ec8
mov eax, 0x512788
call fcn.004c5554
lea eax, [ebp - 0x2c]
mov ecx, dword [0x55f16c]
mov edx, 0x512800
call fcn.00406914
mov eax, dword [ebp - 0x2c]
call fcn.004c5554
lea eax, [ebp - 0x30]
mov ecx, dword [0x55f170]
mov edx, 0x512840
call fcn.00406914
mov eax, dword [ebp - 0x30]
call fcn.004c5554
lea eax, [ebp - 0x38]
call fcn.004939c4
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x34]
mov edx, 0x51286c
call fcn.00406914
mov eax, dword [ebp - 0x34]
call fcn.004c5554
call fcn.004f4374
xor eax, eax
call fcn.005116f8
mov dword [0x55f178], eax
mov dl, 1
mov eax, dword [0x510a20]
call fcn.004c8410
mov dword [0x5579a4], eax
mov ecx, dword [0x55f170]
mov edx, dword [0x55f178]
mov eax, dword [0x5579a4]
call fcn.004cb030
lea ecx, [ebp - 0x3c]
mov eax, dword [0x5579a4]
mov edx, dword [eax + 0x18]
mov al, 0xb7
call fcn.00496dfc
mov edx, dword [ebp - 0x3c]
mov eax, 0x55f17c
call fcn.00406448
mov eax, dword [0x5579a4]
test byte [eax + 0x1d], 0x20
je 0x511fc3
mov eax, dword [0x557ad4]
cmp byte [eax], 0
jne 0x511fc3
push 1
push 1
mov eax, dword [0x55f17c]
call fcn.004064d4
push eax
mov eax, dword [0x557e7c]
mov eax, dword [eax + 0x2fc]
call fcn.004064d4
mov ecx, 0x30
pop edx
call fcn.004f4c5c
call fcn.004117e0
mov eax, dword [0x5579a4]
test byte [eax + 0x1d], 1
je 0x512006
call fcn.00494a74
test al, al
jne 0x512006
push 1
push 1
mov eax, dword [0x55f17c]
call fcn.004064d4
push eax
mov eax, dword [0x557e7c]
mov eax, dword [eax + 0x1dc]
call fcn.004064d4
mov ecx, 0x30
pop edx
call fcn.004f4c5c
call fcn.004117e0
mov eax, dword [0x55f178]
xor edx, edx
mov dword [0x55f178], edx
call fcn.00404098
mov al, 2
call fcn.005116f8
mov dword [0x55f178], eax
lea eax, [ebp - 0x20]
push eax
push 6
mov ecx, 0x85050900
mov dx, 0x20
mov eax, dword [0x5579a4]
call fcn.004c88dc
test al, al
jne 0x51204b
mov eax, 0x5128ac
call fcn.0049828c
cmp dword [0x55f194], 0
je 0x512066
lea eax, [ebp - 4]
mov edx, dword [0x557d4c]
mov edx, dword [edx]
call fcn.0040532c
jmp 0x512071
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x20]
call fcn.00511d6c
mov eax, dword [0x5579a4]
cmp byte [eax + 0x10], 0
je 0x512099
mov eax, dword [0x557ad4]
cmp byte [eax], 0
jne 0x512090
mov eax, 0x512944
call fcn.0049828c
mov al, 1
call fcn.004f514c
jmp 0x5120a0
xor eax, eax
call fcn.004f514c
call fcn.004f2464
cmp dword [ebp - 4], 0
je 0x5121a8
call fcn.004f1e40
call fcn.004f279c
mov eax, dword [0x557a04]
mov edx, dword [0x55f16c]
call fcn.00406448
mov eax, dword [0x557de0]
mov edx, dword [0x5579a4]
mov edx, dword [edx + 0x14]
call fcn.00406448
movzx eax, byte [0x55f183]
or al, byte [0x55f184]
mov edx, dword [0x557b64]
mov byte [edx], al
mov eax, dword [0x557fd8]
mov edx, dword [ebp - 0x18]
call fcn.00406448
mov eax, dword [0x557c8c]
mov edx, dword [ebp - 0x14]
call fcn.00406448
mov eax, dword [0x557af0]
mov edx, dword [ebp - 0x10]
call fcn.00406448
mov eax, dword [0x557b90]
mov edx, dword [ebp - 0xc]
call fcn.00406448
mov eax, dword [ebp - 8]
test eax, eax
je 0x512131
sub eax, 4
mov eax, dword [eax]
mov edx, eax
add edx, edx
mov eax, dword [ebp - 8]
call fcn.00511cb4
mov dl, 1
mov eax, dword [0x50d4ec]
call fcn.0050dd04
mov edx, dword [0x557bb4]
mov dword [edx], eax
mov eax, 0x4f3d4c
mov edx, dword [0x557bb4]
mov edx, dword [edx]
mov dword [edx + 0xc], eax
mov eax, 0x4f3f64
mov edx, dword [0x557bb4]
mov edx, dword [edx]
mov dword [edx + 0x10], eax
mov eax, 0x4f3f70
mov edx, dword [0x557bb4]
mov edx, dword [edx]
mov dword [edx + 0x14], eax
mov eax, 0x4f3f7c
mov edx, dword [0x557bb4]
mov edx, dword [edx]
mov dword [edx + 0x18], eax
mov ecx, dword [0x557c50]
mov ecx, dword [ecx]
mov eax, dword [0x557bb4]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.0050ddfc
xor edx, edx
push ebp
push 0x5125f1
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x512524
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x557bb4]
cmp dword [eax], 0
je 0x512237
xor edx, edx
push ebp
push 0x51220b
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
push 0
push 1
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x557bb4]
mov eax, dword [eax]
mov edx, 0x5129d8
call fcn.0050dfb8
pop dword fs:[0]
add esp, 8
jmp 0x512224
test al, al
jne 0x512237
mov eax, 0x512a68
call fcn.004c5554
call fcn.004117e0
cmp byte [0x55f183], 0
jne 0x512271
cmp byte [0x55f184], 0
jne 0x512271
push 0x124
push 1
push 6
mov eax, dword [0x5579a4]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x55f17c]
mov al, 0x27
call fcn.00510e04
cmp eax, 6
je 0x512271
call fcn.004117e0
xor edx, edx
xor eax, eax
call fcn.0051156c
jmp 0x51229f
push 0x31
push 1
push 2
mov eax, dword [0x5579a4]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x55f17c]
mov al, 0xbd
call fcn.00510e04
dec eax
je 0x51229f
call fcn.004117e0
mov eax, dword [0x5579a4]
call fcn.004c8930
test al, al
jne 0x51227c
jmp 0x5122c2
push 0xa
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x557e6c]
mov eax, dword [eax]
call fcn.00490bf0
mov eax, dword [0x558058]
cmp byte [eax], 0
jne 0x5122af
mov eax, dword [0x5579f4]
mov byte [eax], 0
lea ecx, [ebp - 0x48]
mov eax, dword [0x5579a4]
mov edx, dword [eax + 0x18]
mov al, 0xa7
call fcn.00496dfc
mov edx, dword [ebp - 0x48]
mov eax, dword [0x557e6c]
mov eax, dword [eax]
mov eax, dword [eax + 0x170]
call fcn.004952c8
call fcn.00510c48
xor edx, edx
mov al, 1
call fcn.0051156c
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 0x28], eax
mov eax, dword [0x5579a4]
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x24], edx
mov ecx, 0x511088
mov dl, 1
mov eax, dword [0x5579a4]
call fcn.004c9700
mov byte [ebp - 0x22], al
movzx eax, byte [ebp - 0x22]
mov edx, dword [0x557d94]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea edx, [ebp - 0x44]
xor ecx, ecx
mov eax, 0x512ad0
call fcn.004c57d8
mov eax, dword [0x5579a4]
cmp byte [eax + 0x1c], 0
jne 0x51236d
mov eax, dword [0x5579a4]
test byte [eax + 0x1d], 8
jne 0x51236d
xor eax, eax
jmp 0x51236f
mov al, 1
mov byte [ebp - 0x23], al
mov eax, dword [0x557bb4]
cmp dword [eax], 0
je 0x51240d
mov eax, dword [0x557bb4]
mov eax, dword [eax]
mov edx, 0x512afc
call fcn.0050dea8
test al, al
je 0x51240d
cmp byte [ebp - 0x23], 0
jne 0x512403
xor eax, eax
push ebp
push 0x5123e8
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 0
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x557bb4]
mov eax, dword [eax]
mov edx, 0x512afc
call fcn.0050dfb8
test al, al
je 0x5123de
mov byte [ebp - 0x23], 1
mov eax, 0x512b20
call fcn.004c5554
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x51240d
mov eax, 0x512c00
call fcn.004c5554
movzx eax, byte [ebp - 0x23]
mov edx, dword [0x557d94]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea edx, [ebp - 0x44]
xor ecx, ecx
mov eax, 0x512cb8
call fcn.004c57d8
cmp byte [0x55f184], 0
jne 0x512468
mov eax, dword [0x557e6c]
mov eax, dword [eax]
call fcn.00490bf0
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [ebp - 0x28]
cmp eax, 0x3e8
jae 0x512468
push 0xff
push 0xa
push 0
push 0
push 0
call sub.user32.dll_MsgWaitForMultipleObjects
jmp 0x512439
mov eax, dword [0x557b04]
mov eax, dword [eax]
mov edx, dword [0x557b04]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00404098
mov dl, 1
mov al, 2
call fcn.0051156c
cmp byte [ebp - 0x23], 0
jne 0x5124c8
cmp byte [0x55f183], 0
jne 0x512511
cmp byte [0x55f184], 0
jne 0x512511
push 0x10040
push 1
push 1
mov eax, dword [0x5579a4]
mov edx, dword [eax + 0x18]
movzx eax, byte [ebp - 0x22]
movzx eax, byte [eax + 0x5579b0]
mov ecx, dword [0x55f17c]
call fcn.00510e04
jmp 0x512511
cmp byte [0x55f185], 0
jne 0x512501
cmp byte [0x55f184], 0
jne 0x5124fd
push 0x10024
push 1
push 6
mov eax, dword [0x5579a4]
mov edx, dword [eax + 0x18]
mov ecx, dword [0x55f17c]
mov al, 0xbb
call fcn.00510e04
cmp eax, 6
jne 0x512501
mov byte [ebp - 0x21], 1
cmp byte [ebp - 0x21], 0
jne 0x512511
mov eax, 0x512cfc
call fcn.004c5554
mov dl, 1
mov al, 3
call fcn.0051156c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x512538
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5125fb
xor edx, edx
push ebp
push 0x512573
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x557b04]
mov eax, dword [eax]
mov edx, dword [0x557b04]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00404098
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x512582
mov eax, dword [0x557bb4]
cmp dword [eax], 0
je 0x5125de
xor eax, eax
push ebp
push 0x5125c5
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0x11
lea ecx, [ebp - 0x44]
mov eax, dword [0x557bb4]
mov eax, dword [eax]
mov edx, 0x512d58
call fcn.0050df04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5125de
mov eax, dword [0x557e6c]
mov eax, dword [eax]
mov eax, dword [eax + 0x170]
call fcn.00495358
ret