Function at 0x4c98c8
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc8
push esi
push edi
mov esi, edx
lea edi, [ebp - 0x34]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 4], eax
lea eax, [ebp - 0x34]
mov edx, dword [0x46621c]
call fcn.00405cd8
xor eax, eax
push ebp
push 0x4c9d23
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
movzx eax, word [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x214], eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0xa]
mov edx, dword [ebp - 4]
mov dword [edx + 0x218], eax
cmp dword [ebp - 0x34], 0x1b
jne 0x4c992f
mov eax, dword [ebp - 4]
mov byte [eax + 0x20], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x21], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x20], 0
jne 0x4c9cb4
mov eax, dword [ebp - 0x34]
add eax, 0xfffffffa
cmp eax, 0x15
ja case.0x4c9951.6
mov al, byte [eax + 0x4c9958]
jmp dword [eax*4 + 0x4c996e]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 4]
mov dword [edx + 0x18], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 4]
mov dword [edx + 0x1c], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 2
je 0x4c999d
mov eax, dword [ebp - 4]
mov byte [eax + 0x134], 1
jmp case.0x4c9951.6
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [0x568830]
mov eax, dword [eax]
test eax, eax
jle 0x4c99dc
mov dword [ebp - 0x14], eax
mov dword [ebp - 8], 1
mov eax, dword [ebp - 8]
add eax, eax
mov edx, dword [0x5688dc]
mov eax, dword [edx + eax*8 - 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 4]
jne 0x4c99d4
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
inc dword [ebp - 8]
dec dword [ebp - 0x14]
jne 0x4c99b7
cmp dword [ebp - 0xc], 0
jne case.0x4c9951.6
mov eax, dword [ebp - 4]
mov byte [eax + 0x134], 0
cmp dword [ebp - 0x34], 0x17
jne 0x4c99f7
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [0x5685c0]
mov eax, dword [eax]
cmp eax, dword [ebp - 4]
jne 0x4c9bb0
cmp dword [ebp - 0x34], 0xbc3
jne 0x4c9a2a
mov eax, dword [0x5684d4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.004a0ee0
test al, al
je 0x4c9d07
cmp dword [ebp - 0x34], 0xbc5
jne 0x4c9a65
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [0x5685c0]
mov eax, dword [eax]
movzx ecx, word [eax + 0xa]
mov eax, dword [0x5685c0]
mov eax, dword [eax]
movzx edx, word [eax + 8]
mov eax, dword [0x5684d4]
mov eax, dword [eax]
call fcn.004a0e64
test al, al
je 0x4c9d07
mov eax, dword [ebp - 0x34]
add eax, 0xfffff443
cmp eax, 0x1e
ja case.0x4c9a7c.3005
mov al, byte [eax + 0x4c9a83]
jmp dword [eax*4 + 0x4c9aa2]
mov eax, dword [ebp - 4]
add eax, 0x224
lea edx, [ebp - 0x34]
mov ecx, dword [0x46621c]
call fcn.00405df8
sub dword [ebp - 0x34], 0xbb8
jmp case.0x4c9a7c.3005
mov eax, dword [ebp - 4]
cmp dword [eax + 0x18], 0
je 0x4c9b10
mov eax, dword [ebp - 0x24]
movzx eax, word [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xc4], eax
mov eax, dword [ebp - 0x24]
movzx eax, word [eax + 0xa]
mov edx, dword [ebp - 4]
mov dword [edx + 0xc8], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [edx + 0xcc], eax
mov eax, dword [ebp - 4]
add eax, 0x224
lea edx, [ebp - 0x34]
mov ecx, dword [0x46621c]
call fcn.00405df8
mov dword [ebp - 0x34], 5
jmp case.0x4c9a7c.3005
mov eax, dword [ebp - 4]
add eax, 0x224
lea edx, [ebp - 0x34]
mov ecx, dword [0x46621c]
call fcn.00405df8
mov dword [ebp - 0x34], 8
jmp case.0x4c9a7c.3005
mov eax, dword [ebp - 4]
add eax, 0x224
lea edx, [ebp - 0x34]
mov ecx, dword [0x46621c]
call fcn.00405df8
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [edx + 0x230], eax
sub dword [ebp - 0x34], 0xbb8
mov eax, dword [ebp - 4]
movzx eax, word [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x208], eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0xa]
mov edx, dword [ebp - 4]
mov dword [edx + 0x20c], eax
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x210], eax
mov eax, dword [ebp - 0x34]
sub eax, 0x11
je 0x4c9c1d
sub eax, 0xe
jne 0x4c9c7b
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 4]
mov dword [edx + 0x174], eax
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x30]
lea eax, [eax + eax*4]
mov edx, 0xc8
sub edx, eax
mov dword [ebp - 0x38], edx
fild dword [ebp - 0x38]
call fcn.004033b0
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x50
jle 0x4c9c00
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x1e8], eax
jmp 0x4c9c0d
mov eax, dword [ebp - 4]
mov dword [eax + 0x1e8], 0x50
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 4]
mov dword [edx + 0x168], eax
jmp 0x4c9c9a
mov al, byte [ebp - 0x28]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc], al
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x4c9c9a
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov esi, eax
lea edi, [edx + 0x10c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 4]
mov dword [eax + 0x10c], 0xffffffff
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 4]
mov dword [edx + 0x120], eax
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 4]
mov dword [edx + 0x124], eax
mov edx, 0x24
mov eax, dword [ebp - 0x10]
call fcn.00402ecc
jmp 0x4c9c9a
mov ax, word [ebp - 0x30]
mov edx, dword [ebp - 4]
mov word [edx + 8], ax
mov ax, word [ebp - 0x2c]
mov edx, dword [ebp - 4]
mov word [edx + 0xa], ax
mov al, byte [ebp - 0x28]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc], al
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 4]
mov dword [edx + 0x148], eax
mov eax, dword [ebp - 4]
mov si, 0xffff
call fcn.004043ac
jmp 0x4c9cd9
cmp dword [ebp - 0x34], 0x21
jne 0x4c9cd9
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 4]
mov dword [edx + 0x148], eax
mov eax, dword [ebp - 4]
mov si, 0xffff
call fcn.004043ac
mov eax, dword [ebp - 4]
mov byte [eax + 0x21], 1
cmp dword [ebp - 0x34], 0x20
je 0x4c9ce5
cmp dword [ebp - 0x34], 0x22
jne 0x4c9cfb
mov eax, dword [ebp - 4]
mov byte [eax + 0x20], 1
mov eax, dword [0x5684d4]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.004a1878
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.004043ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c9d2a
lea eax, [ebp - 0x34]
mov edx, dword [0x46621c]
call fcn.00405b94
ret