Function at 0x104f6b6
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3a4
mov eax, dword [0x1072c48]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor ebx, ebx
test byte [0x1074690], 1
push edi
mov esi, ecx
mov dword [ebp - 0x38c], ebx
jne 0x104f6fe
mov eax, dword [esi + 0x84]
or dword [0x1074690], 1
cmp eax, ebx
je 0x104f6f7
mov eax, dword [eax + 0x54]
jmp 0x104f6f9
xor eax, eax
mov dword [0x107468c], eax
mov eax, dword [esi + 0x80]
mov ecx, dword [eax]
lea edx, [ebp - 0x3a4]
push edx
push eax
call dword [ecx + 0x1c]
cmp dword [ebp - 0x3a0], ebx
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
jl 0x104f730
mov eax, dword [0x107468c]
cmp eax, ebx
je 0x104f74c
cmp dword [eax + 0x250], ebx
je 0x104f74c
mov dword [esi + 0x34], ebx
mov eax, dword [esi + 0x30]
cmp eax, ebx
je 0x104f740
push eax
call edi
mov dword [esi + 0x30], ebx
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x3a4]
sub eax, ebx
je 0x104f7ff
dec eax
je 0x104f7f0
dec eax
je 0x104f7d4
dec eax
je 0x104f797
dec eax
je 0x104f788
dec eax
je 0x104f77c
mov dword [ebp - 0x388], 0x2779
jmp 0x104f852
mov dword [ebp - 0x388], 0x2778
jmp 0x104f7fa
mov dword [ebp - 0x388], 0x2777
jmp 0x104f852
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x64]
cmp eax, 0x1d4c0
jbe 0x104f7c8
mov dword [esi + 0x34], ebx
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x388], 0x277a
cmp eax, ebx
je 0x104f7c1
push eax
call edi
mov dword [esi + 0x30], ebx
push 0x1006b90
jmp 0x104f82e
mov dword [ebp - 0x388], 0x2775
jmp 0x104f852
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x64]
cmp eax, 0x1d4c0
ja 0x104f80f
mov dword [ebp - 0x388], 0x2776
jmp 0x104f852
mov dword [ebp - 0x388], 0x277a
mov dword [esi + 0x34], ebx
jmp 0x104f852
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x64]
cmp eax, 0x1d4c0
jbe 0x104f848
mov dword [esi + 0x34], ebx
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x388], 0x277a
cmp eax, ebx
je 0x104f829
push eax
call edi
mov dword [esi + 0x30], ebx
push 0x1006b58
mov eax, 0x80072efd
push 2
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x3a0], eax
call fcn.01055bad
jmp 0x104f852
mov dword [ebp - 0x388], 0x2774
cmp dword [ebp - 0x3a0], ebx
je 0x104f888
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x104f866
mov esi, 0x1007ad0
push dword [ebp - 0x3a0]
push esi
push 0x10080cc
push 2
call fcn.01055c8a
add esp, 0x10
push dword [ebp - 0x3a0]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [ebp - 0x39c]
mov edi, dword [sym.imp.USER32.dll_LoadStringW]
mov esi, 0x100
cmp eax, 0xffffffff
jne 0x104f9ba
lea ebx, [esi - 0x80]
push ebx
lea eax, [ebp - 0x104]
push eax
push 0x26e8
push dword [0x1073960]
call edi
test eax, eax
jne 0x104f8d0
push 0x1007904
push ebx
lea eax, [ebp - 0x104]
push eax
call fcn.01035831
xor ebx, ebx
push esi
lea eax, [ebp - 0x384]
push eax
push dword [ebp - 0x388]
push dword [0x1073960]
call edi
test eax, eax
je 0x104f985
lea eax, [ebp - 0x384]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x104f8f9
sub eax, edx
sar eax, 1
mov ecx, eax
lea eax, [ebp - 0x104]
lea edx, [eax + 2]
mov si, word [eax]
inc eax
inc eax
cmp si, bx
jne 0x104f912
sub eax, edx
sar eax, 1
lea esi, [eax + ecx + 0x21]
xor ecx, ecx
push 2
pop edx
mov eax, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call sub.msvcrt.dll_void____cdecl_operator_new___unsigned_int_
mov edi, eax
pop ecx
cmp edi, ebx
je 0x104f985
push dword [ebp - 0x398]
lea eax, [ebp - 0x184]
push 0x40
push eax
call fcn.010580d2
test eax, eax
jl 0x104f97e
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x384]
push eax
push esi
push edi
call fcn.0103592d
add esp, 0x14
push edi
call fcn.01055264
push edi
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
mov ecx, dword [ebp - 0x39c]
pop edi
pop esi
cmp ecx, ebx
pop ebx
jne 0x104f995
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x398]
imul eax, eax, 0x64
xor edx, edx
div ecx
push eax
call fcn.0105522c
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x38c]
xor ecx, ebp
call fcn.01047480
leave
ret
sub eax, dword [ebp - 0x398]
xor edx, edx
cmp dword [ebp - 0x394], ebx
jbe 0x104f9e3
div dword [ebp - 0x394]
push eax
push esi
lea eax, [ebp - 0x104]
push eax
call fcn.0105aa80
jmp 0x104f8d2
mov ecx, 0x3e80
div ecx
jmp 0x104f9d0