Function at 0x4c7504
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0x228
mov eax, 0x511f8f
call fcn.004f41e2
mov eax, dword [ebp + 0x34]
mov bl, byte [ebp + 8]
mov esi, dword [ebp + 0x10]
mov edi, dword [ebp + 0x28]
mov dword [ebp - 0x234], eax
xor eax, eax
mov byte [ebp - 0x21d], bl
mov byte [ebp - 0x224], bl
mov dword [ebp - 0x228], edi
test esi, esi
je 0x4c7889
cmp word [esi], ax
je 0x4c7889
lea ecx, [ebp - 0x1bc]
call fcn.004e25a1
and dword [ebp - 4], 0
lea ecx, [ebp - 0x1bc]
mov eax, 0x104
push eax
push eax
call fcn.004e2851
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x4c7865
lea ecx, [ebp - 0x1bc]
call fcn.004e2932
test al, al
jne 0x4c7865
push 0x3c
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x60], 0x20
push 0
push eax
call fcn.004f5a90
add esp, 0xc
test bl, bl
je 0x4c75c0
push dword [ebp + 0xc]
lea eax, [ebp - 0x60]
push str._interactive:_u
push 0x20
push eax
call fcn.004e1e5a
add esp, 0x10
xor eax, eax
mov ecx, str._apparent
push eax
push eax
push eax
push esi
test bl, bl
lea eax, [ebp - 0x60]
cmove eax, ecx
xor ecx, ecx
push eax
test edi, edi
mov eax, 0x524d94
cmove eax, ecx
test edi, edi
push eax
push edi
mov eax, str._dir__
cmove eax, ecx
mov ecx, dword [0x5a23ec]
push eax
push 1
call fcn.004673c5
neg eax
lea ecx, [ebp - 0x218]
sbb eax, eax
and eax, str._log
push eax
call fcn.004e2531
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 1
call fcn.0044612f
xor ebx, ebx
push ebx
push str.VirtualConsoleClass
push ebx
mov esi, ebx
push ebx
mov dword [ebp - 0x21c], esi
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x230], eax
lea edi, [ebp - 0x20]
xor eax, eax
stosd dword es:[edi], eax
push 8
push 0x514870
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x1c
push 5
push 0x12
lea eax, [ebp - 0x160]
push str.ConEmu__02u_02u_02u_s_starter_ParentPID_u
push eax
call fcn.00401133
add esp, 0x1c
call fcn.004e3ac6
test al, al
je 0x4c76a3
push 0x48
call fcn.004e1bc1
pop ecx
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x4c76c4
mov ecx, eax
call fcn.004c6a0b
jmp 0x4c76c0
push 0x38
call fcn.004e1bc1
pop ecx
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 3
test eax, eax
je 0x4c76c4
mov ecx, eax
call fcn.004c69d9
mov edi, eax
jmp 0x4c76c6
mov edi, ebx
mov byte [ebp - 4], 1
mov dword [ebp - 0x22c], edi
test edi, edi
jne 0x4c76f6
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Scheduler:_Failed_to_create_Task_Scheduler_interface__memory_allocation_.
call fcn.00420ad9
mov ebx, dword [ebp - 0x228]
add esp, 0x14
jmp 0x4c783f
push dword [ebp - 0x228]
mov esi, dword [edi]
lea ecx, [ebp - 0x218]
call fcn.0044612f
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0044612f
push eax
lea eax, [ebp - 0x160]
mov ecx, edi
push eax
push dword [ebp - 0x224]
call dword [esi + 4]
mov ebx, eax
test ebx, ebx
js 0x4c7839
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
mov ebx, eax
mov dword [ebp - 0x228], ebx
test ebx, ebx
js 0x4c7839
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0xc]
xor esi, esi
inc esi
cmp byte [ebp - 0x21d], 0
mov dword [ebp - 0x21c], esi
je 0x4c77ad
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov dword [ebp - 0x224], eax
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xc]
test eax, eax
je 0x4c7839
cmp eax, 3
je 0x4c7839
cmp eax, 4
je 0x4c7839
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
call esi
sub eax, dword [ebp - 0x224]
cmp eax, 0x7530
jbe 0x4c7770
jmp 0x4c7839
lea ecx, [ebp - 0x1bc]
call fcn.0044612f
push eax
call fcn.004e487c
pop ecx
test al, al
je 0x4c783f
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [ebp - 0x224], eax
mov ebx, eax
xor eax, eax
push eax
push str.VirtualConsoleClass
push eax
push eax
jmp 0x4c7807
cmp esi, dword [ebp - 0x230]
je 0x4c77fd
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4c77fd
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4c7815
push 0
push str.VirtualConsoleClass
push esi
push 0
call dword [sym.imp.USER32.dll_FindWindowExW]
mov esi, eax
test esi, esi
jne 0x4c77df
jmp 0x4c7820
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
test esi, esi
jne 0x4c7833
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
call edi
sub eax, ebx
cmp eax, 0x7530
jbe 0x4c77d3
mov ebx, dword [ebp - 0x228]
mov esi, dword [ebp - 0x21c]
lea eax, [ebp - 0x22c]
push eax
call fcn.00403ba7
mov eax, dword [ebp - 0x234]
pop ecx
test eax, eax
je 0x4c7858
mov dword [eax], ebx
lea ecx, [ebp - 0x218]
call fcn.004e25e0
jmp 0x4c787a
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
push str.GetModuleFileName_NULL__failed
call fcn.00420ad9
add esp, 0x14
mov esi, ebx
lea ecx, [ebp - 0x1bc]
call fcn.004e25e0
mov eax, esi
jmp 0x4c789d
push eax
push eax
push eax
push 0xffffffffffffffff
push str.CreateProcessDemoted_failed__lpCommandLine_is_empty
call fcn.00420ad9
add esp, 0x14
xor eax, eax
call fcn.004f418c
ret