Function at 0x4b71f0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd4
mov eax, dword [0x5854b4]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0x78], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x78]
mov dword [ecx + 0x5c], eax
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov ecx, dword [edx + 0x5c]
cmp ecx, dword [eax + 0x58]
jge 0x4b7226
jmp 0x4b75dc
mov dword [ebp - 0x7c], 0
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x58]
mov ecx, dword [ebp - 0x78]
add eax, dword [ecx + 0x50]
mov edx, dword [ebp - 0x78]
cmp dword [edx + 0x5c], eax
jge 0x4b724a
mov dword [ebp - 0x7c], 0
jmp 0x4b7274
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x58]
mov edx, dword [ebp - 0x78]
add ecx, dword [edx + 0x50]
mov eax, dword [ebp - 0x78]
add ecx, dword [eax + 0x54]
mov edx, dword [ebp - 0x78]
cmp dword [edx + 0x5c], ecx
jge 0x4b726d
mov dword [ebp - 0x7c], 1
jmp 0x4b7274
mov dword [ebp - 0x7c], 0xffffffff
cmp dword [ebp - 0x7c], 1
jne 0x4b74de
mov eax, dword [ebp - 0x78]
mov esi, dword [eax + 0x60]
add esi, 1
mov ecx, dword [ebp - 0x78]
add ecx, 4
call fcn.00408470
mov ecx, eax
mov eax, esi
cdq
idiv ecx
mov dword [ebp - 0x90], edx
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x60]
push eax
mov ecx, dword [ebp - 0x78]
call fcn.004b7640
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x90]
push ecx
mov ecx, dword [ebp - 0x78]
call fcn.004b7640
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x84], 0
je 0x4b72db
cmp dword [ebp - 0x88], 0
jne 0x4b72e0
jmp 0x4b75dc
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov ecx, dword [edx + 0x5c]
sub ecx, dword [eax + 0x58]
mov edx, dword [ebp - 0x78]
sub ecx, dword [edx + 0x50]
mov dword [ebp - 0x94], ecx
cvtsi2sd xmm0, dword [ebp - 0x94]
mov eax, dword [ebp - 0x78]
cvtsi2sd xmm1, dword [eax + 0x54]
divsd xmm0, xmm1
movsd qword [ebp - 0xb4], xmm0
movsd xmm0, qword [ebp - 0xb4]
subsd xmm0, qword [0x54d8a8]
movsd xmm1, qword [ebp - 0xb4]
subsd xmm1, qword [0x54d8a8]
mulsd xmm0, xmm1
movsd xmm1, qword [0x54d8a8]
subsd xmm1, xmm0
sub esp, 8
movsd qword [esp], xmm1
call fcn.00524250
add esp, 8
fstp qword [ebp - 0xd4]
mov ecx, dword [ebp - 0x78]
cvtsi2sd xmm0, dword [ecx + 0x48]
mulsd xmm0, qword [ebp - 0xd4]
cvttsd2si edx, xmm0
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x38]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x3c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x38]
mov eax, dword [ebp - 0x78]
add edx, dword [eax + 0x48]
sub edx, dword [ebp - 0x80]
mov dword [ebp - 0x2c], edx
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x44]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x38]
mov edx, dword [ebp - 0x78]
add ecx, dword [edx + 0x48]
sub ecx, dword [ebp - 0x80]
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x3c]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x38]
mov ecx, dword [ebp - 0x78]
add eax, dword [ecx + 0x48]
mov dword [ebp - 0x4c], eax
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x44]
mov dword [ebp - 0x48], eax
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], ecx
xor edx, edx
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0x98], edx
lea eax, [ebp - 0xac]
push eax
push 0x18
mov ecx, dword [ebp - 0x84]
push ecx
call dword [sym.imp.GDI32.dll_GetObjectW]
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x38]
add eax, dword [ebp - 0x80]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0xac]
push eax
push 0x18
mov ecx, dword [ebp - 0x88]
push ecx
call dword [sym.imp.GDI32.dll_GetObjectW]
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x38]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], 0
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x38], edx
push 0
push 0
push 0
push 0
push 0xff
push 1
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x84]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0044cf40
add esp, 0x30
push 0
push 0
push 0
push 0
push 0xff
push 1
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x44]
push ecx
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x88]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0044cf40
add esp, 0x30
jmp 0x4b75dc
cmp dword [ebp - 0x7c], 0xffffffff
jne 0x4b751c
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x60]
add ecx, 1
mov edx, dword [ebp - 0x78]
mov dword [edx + 0x60], ecx
mov ecx, dword [ebp - 0x78]
add ecx, 4
call fcn.00408470
mov ecx, dword [ebp - 0x78]
cmp dword [ecx + 0x60], eax
jl 0x4b7510
mov edx, dword [ebp - 0x78]
mov dword [edx + 0x60], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x78]
mov dword [ecx + 0x58], eax
xor edx, edx
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x60]
push ecx
mov ecx, dword [ebp - 0x78]
call fcn.004b7640
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jne 0x4b7562
jmp 0x4b75dc
lea edx, [ebp - 0xcc]
push edx
push 0x18
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
test eax, eax
je 0x4b75dc
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0x68], edx
xor eax, eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
push 0
push 0
push 0
push 0
push 0xff
push 1
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x74]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0044cf40
add esp, 0x30
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d77de
mov esp, ebp
pop ebp
ret 0xc