Function at 0x104f695
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3a4
mov eax, dword [0x1072c48]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor ebx, ebx
test byte [0x1074690], 1
push edi
mov esi, ecx
mov dword [ebp - 0x38c], ebx
jne 0x104f6dd
mov eax, dword [esi + 0x84]
or dword [0x1074690], 1
cmp eax, ebx
je 0x104f6d6
mov eax, dword [eax + 0x54]
jmp 0x104f6d8
xor eax, eax
mov dword [0x107468c], eax
mov eax, dword [esi + 0x80]
mov ecx, dword [eax]
lea edx, [ebp - 0x3a4]
push edx
push eax
call dword [ecx + 0x1c]
cmp dword [ebp - 0x3a0], ebx
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
jl 0x104f70f
mov eax, dword [0x107468c]
cmp eax, ebx
je 0x104f72b
cmp dword [eax + 0x250], ebx
je 0x104f72b
mov dword [esi + 0x34], ebx
mov eax, dword [esi + 0x30]
cmp eax, ebx
je 0x104f71f
push eax
call edi
mov dword [esi + 0x30], ebx
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x3a4]
sub eax, ebx
je 0x104f7de
dec eax
je 0x104f7cf
dec eax
je 0x104f7b3
dec eax
je 0x104f776
dec eax
je 0x104f767
dec eax
je 0x104f75b
mov dword [ebp - 0x388], 0x2779
jmp 0x104f831
mov dword [ebp - 0x388], 0x2778
jmp 0x104f7d9
mov dword [ebp - 0x388], 0x2777
jmp 0x104f831
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x64]
cmp eax, 0x1d4c0
jbe 0x104f7a7
mov dword [esi + 0x34], ebx
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x388], 0x277a
cmp eax, ebx
je 0x104f7a0
push eax
call edi
mov dword [esi + 0x30], ebx
push 0x1006b90
jmp 0x104f80d
mov dword [ebp - 0x388], 0x2775
jmp 0x104f831
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x64]
cmp eax, 0x1d4c0
ja 0x104f7ee
mov dword [ebp - 0x388], 0x2776
jmp 0x104f831
mov dword [ebp - 0x388], 0x277a
mov dword [esi + 0x34], ebx
jmp 0x104f831
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x64]
cmp eax, 0x1d4c0
jbe 0x104f827
mov dword [esi + 0x34], ebx
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x388], 0x277a
cmp eax, ebx
je 0x104f808
push eax
call edi
mov dword [esi + 0x30], ebx
push 0x1006b58
mov eax, 0x80072efd
push 2
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x3a0], eax
call fcn.01055b8c
jmp 0x104f831
mov dword [ebp - 0x388], 0x2774
cmp dword [ebp - 0x3a0], ebx
je 0x104f867
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x104f845
mov esi, 0x1007ad0
push dword [ebp - 0x3a0]
push esi
push 0x10080cc
push 2
call fcn.01055c69
add esp, 0x10
push dword [ebp - 0x3a0]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [ebp - 0x39c]
mov edi, dword [sym.imp.USER32.dll_LoadStringW]
mov esi, 0x100
cmp eax, 0xffffffff
jne 0x104f999
lea ebx, [esi - 0x80]
push ebx
lea eax, [ebp - 0x104]
push eax
push 0x26e8
push dword [0x1073960]
call edi
test eax, eax
jne 0x104f8af
push 0x1007904
push ebx
lea eax, [ebp - 0x104]
push eax
call fcn.01035811
xor ebx, ebx
push esi
lea eax, [ebp - 0x384]
push eax
push dword [ebp - 0x388]
push dword [0x1073960]
call edi
test eax, eax
je 0x104f964
lea eax, [ebp - 0x384]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x104f8d8
sub eax, edx
sar eax, 1
mov ecx, eax
lea eax, [ebp - 0x104]
lea edx, [eax + 2]
mov si, word [eax]
inc eax
inc eax
cmp si, bx
jne 0x104f8f1
sub eax, edx
sar eax, 1
lea esi, [eax + ecx + 0x21]
xor ecx, ecx
push 2
pop edx
mov eax, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call sub.msvcrt.dll_void____cdecl_operator_new___unsigned_int_
mov edi, eax
pop ecx
cmp edi, ebx
je 0x104f964
push dword [ebp - 0x398]
lea eax, [ebp - 0x184]
push 0x40
push eax
call fcn.010580b1
test eax, eax
jl 0x104f95d
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x384]
push eax
push esi
push edi
call fcn.0103590d
add esp, 0x14
push edi
call fcn.01055243
push edi
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
mov ecx, dword [ebp - 0x39c]
pop edi
pop esi
cmp ecx, ebx
pop ebx
jne 0x104f974
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x398]
imul eax, eax, 0x64
xor edx, edx
div ecx
push eax
call fcn.0105520b
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x38c]
xor ecx, ebp
call fcn.01047464
leave
ret
sub eax, dword [ebp - 0x398]
xor edx, edx
cmp dword [ebp - 0x394], ebx
jbe 0x104f9c2
div dword [ebp - 0x394]
push eax
push esi
lea eax, [ebp - 0x104]
push eax
call fcn.0105aa5f
jmp 0x104f8b1
mov ecx, 0x3e80
div ecx
jmp 0x104f9af