Function at 0x4e9af4
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
xor edx, edx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4e9fb0
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 4]
xor edx, edx
push edx
push eax
mov eax, dword [0x51570c]
mov eax, dword [eax]
cdq
cmp edx, dword [esp + 4]
jne 0x4e9b3f
cmp eax, dword [esp]
pop edx
pop eax
jbe 0x4e9b47
jmp case.default.0x4e9bf9
pop edx
pop eax
jg case.default.0x4e9bf9
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 4], eax
mov eax, dword [0x51570c]
cmp dword [eax], 0x3e8
je 0x4e9b68
mov eax, dword [0x51570c]
mov dword [eax], 0x3e8
mov eax, dword [ebp - 4]
cmp dword [eax + 0x24], 0
jle 0x4e9be9
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10], 0
jne 0x4e9baf
mov eax, dword [ebp - 4]
add eax, 0x18
push eax
mov eax, dword [ebp - 4]
add eax, 0x1c
push eax
mov eax, dword [ebp - 4]
add eax, 0x10
call fcn.0040515c
mov ecx, eax
mov eax, dword [0x5152b8]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x24]
call fcn.004e8d34
mov eax, dword [ebp - 4]
call fcn.004ea198
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.004a0874
test al, al
jne 0x4e9be9
mov eax, dword [ebp - 4]
call fcn.004eb260
mov eax, dword [0x515658]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x1c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x18]
call fcn.004f6b6c
jmp case.default.0x4e9bf9
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0xc]
cmp eax, 9
ja case.default.0x4e9bf9
jmp dword [eax*4 + 0x4e9c00]
mov eax, dword [ebp - 4]
call 0x4e98ac
jmp case.default.0x4e9bf9
mov cl, 1
mov edx, 0x4e9fc4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
mov eax, dword [ebp - 4]
call fcn.004eb300
xor ecx, ecx
mov edx, 0x4e9fd4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
mov eax, dword [ebp - 4]
call fcn.004eb83c
mov al, 1
call fcn.004ecc6c
test al, al
jne case.default.0x4e9bf9
mov edx, 0x4e9fe8
mov eax, 0xffff
call fcn.004f6fe4
jmp case.default.0x4e9bf9
mov cl, 1
mov edx, 0x4ea034
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
mov eax, dword [ebp - 4]
call fcn.004eb6c0
xor ecx, ecx
mov edx, 0x4e9fd4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
mov eax, dword [ebp - 4]
call fcn.004eb83c
jmp case.default.0x4e9bf9
mov eax, dword [ebp - 4]
call fcn.004eb97c
mov eax, dword [ebp - 4]
mov byte [eax + 0xc], 4
jmp case.default.0x4e9bf9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
mov edx, 0x4ea044
call fcn.0040557c
jne 0x4e9d14
mov cl, 1
mov edx, 0x4ea054
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
xor ecx, ecx
mov edx, 0x4ea068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
jmp 0x4e9dde
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
mov edx, 0x4ea078
call fcn.0040557c
jne 0x4e9d4f
mov cl, 1
mov edx, 0x4ea088
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
xor ecx, ecx
mov edx, 0x4ea068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
jmp 0x4e9dde
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
mov edx, 0x4ea09c
call fcn.0040557c
jne 0x4e9d87
mov cl, 1
mov edx, 0x4ea068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
xor ecx, ecx
mov edx, 0x4ea0ac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
jmp 0x4e9dde
mov edx, 0x4ea0c0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.00405774
test eax, eax
jle 0x4e9dcc
mov eax, dword [ebp - 4]
cmp dword [eax + 0x24], 8
jne 0x4e9db8
xor ecx, ecx
mov edx, 0x4ea0ac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
jmp 0x4e9dde
mov cl, 1
mov edx, 0x4ea068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
jmp 0x4e9dde
mov cl, 1
mov edx, 0x4ea068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
mov eax, dword [ebp - 4]
call fcn.004eb584
mov eax, dword [ebp - 4]
mov byte [eax + 0xc], 5
jmp case.default.0x4e9bf9
xor ecx, ecx
mov edx, 0x4e9fd4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2c], 4
jne 0x4e9e2d
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x2d]
mov eax, dword [0x5155a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
call fcn.004ecd5c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
sub eax, 2
je 0x4e9e42
dec eax
je 0x4e9e50
sub eax, 5
je 0x4e9e5e
jmp 0x4e9e6c
xor edx, edx
mov eax, dword [0x519c48]
call fcn.0041ffa8
jmp 0x4e9e78
xor edx, edx
mov eax, dword [0x519c44]
call fcn.0041ffa8
jmp 0x4e9e78
xor edx, edx
mov eax, dword [0x519c58]
call fcn.0041ffa8
jmp 0x4e9e78
xor edx, edx
mov eax, dword [0x519c4c]
call fcn.0041ffa8
mov eax, dword [ebp - 4]
call fcn.004eb83c
jmp case.default.0x4e9bf9
mov cl, 1
mov edx, 0x4ea0d8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
mov eax, dword [ebp - 4]
add eax, 0x14
call fcn.0040515c
mov eax, dword [ebp - 4]
mov byte [eax + 0xc], 7
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 4]
mov dword [edx + 8], eax
jmp case.default.0x4e9bf9
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 8]
cmp eax, 0x1770
jbe case.default.0x4e9bf9
mov eax, dword [ebp - 4]
mov byte [eax + 0xc], 6
mov eax, 0x4ea0e8
call fcn.004f6fcc
jmp case.default.0x4e9bf9
mov eax, dword [ebp - 4]
call fcn.004ebb30
xor ecx, ecx
mov edx, 0x4e9fd4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.004e7434
mov eax, dword [ebp - 4]
call fcn.004eb83c
jmp case.default.0x4e9bf9
mov byte [0x513730], 0
mov eax, dword [0x514d9c]
mov eax, dword [eax]
cmp word [eax + 0x130], 1
jae 0x4e9f92
mov eax, dword [0x519c7c]
sub eax, 2
je 0x4e9f33
sub eax, 3
je 0x4e9f42
jmp 0x4e9f51
lea eax, [ebp - 8]
mov edx, 0x4ea110
call fcn.004051f4
jmp 0x4e9f5e
lea eax, [ebp - 8]
mov edx, 0x4ea11c
call fcn.004051f4
jmp 0x4e9f5e
lea eax, [ebp - 8]
mov edx, 0x4ea128
call fcn.004051f4
mov edx, dword [ebp - 8]
mov eax, 0x121
call fcn.004f704c
lea eax, [ebp - 8]
push eax
mov eax, dword [0x519c7c]
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x10], 0
lea edx, [ebp - 0x14]
xor ecx, ecx
mov eax, 0x4ea134
call fcn.0040aeb8
mov eax, dword [ebp - 8]
call fcn.004f6fcc
mov eax, dword [ebp - 4]
call fcn.004eb83c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e9fb7
lea eax, [ebp - 8]
call fcn.0040515c
ret