Function at 0x4f8670
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
sub rsp, 0x130
mov rbp, rsp
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x108], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x120], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0x48], rbp
mov qword [rbp + 0x140], rcx
mov qword [rbp + 0x148], rdx
mov rcx, qword [rbp + 0x148]
call fcn.0040fa70
nop
mov dword [rbp + 0x118], 0
nop
lea rcx, [rbp + 0x108]
call fcn.0040f960
mov rcx, qword [rbp + 0x148]
mov rdx, rax
mov rax, qword [rbp + 0x148]
mov rax, qword [rax]
call qword [rax + 0x90]
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
test eax, 0x80000000
sete al
mov byte [rbp + 0x93], al
cmp byte [rbp + 0x93], 0
je 0x4f8d47
cmp qword [rbp + 0x108], 0
je 0x4f8d47
lea rcx, [rbp + 0x100]
call fcn.0040f960
mov rcx, qword [rbp + 0x108]
mov rdx, qword [0x00536a80]
mov r8, rax
mov rax, qword [rbp + 0x108]
mov rax, qword [rax]
call qword [rax]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x8c]
test eax, 0x80000000
sete al
mov byte [rbp + 0x8b], al
cmp byte [rbp + 0x8b], 0
je 0x4f8d47
cmp qword [rbp + 0x100], 0
je 0x4f8d47
lea rcx, [rbp + 0xf8]
call fcn.0040f960
mov rcx, qword [rbp + 0x108]
mov rdx, qword [0x005366f0]
mov r8, rax
mov rax, qword [rbp + 0x108]
mov rax, qword [rax]
call qword [rax]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x84]
test eax, 0x80000000
sete al
mov byte [rbp + 0x83], al
cmp byte [rbp + 0x83], 0
je 0x4f8d47
cmp qword [rbp + 0xf8], 0
je 0x4f8d47
lea rcx, [rbp + 0xf0]
call fcn.0040f960
mov rcx, qword [rbp + 0x100]
mov rdx, rax
mov rax, qword [rbp + 0x100]
mov rax, qword [rax]
call qword [rax + 0x48]
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x7c]
test eax, 0x80000000
sete al
mov byte [rbp + 0x7b], al
cmp byte [rbp + 0x7b], 0
je 0x4f8d47
cmp qword [rbp + 0xf0], 0
je 0x4f8d47
lea rcx, [rbp + 0xd8]
call fcn.0040f960
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [0x00536b60]
mov r8, rax
mov rax, qword [rbp + 0xf0]
mov rax, qword [rax]
call qword [rax]
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x74]
test eax, 0x80000000
sete al
mov byte [rbp + 0x73], al
cmp byte [rbp + 0x73], 0
je 0x4f8d47
cmp qword [rbp + 0xd8], 0
je 0x4f8d47
lea rcx, [rbp + 0x120]
call fcn.0040f960
mov rcx, qword [rbp + 0xd8]
mov rdx, rax
mov rax, qword [rbp + 0xd8]
mov rax, qword [rax]
call qword [rax + 0x148]
mov dword [rbp + 0x6c], eax
mov eax, dword [rbp + 0x6c]
test eax, 0x80000000
sete al
mov byte [rbp + 0x6b], al
cmp byte [rbp + 0x6b], 0
je 0x4f8d47
cmp qword [rbp + 0x120], 0
je 0x4f8d47
lea rcx, [rbp + 0x128]
call fcn.0040f960
mov rcx, qword [rbp + 0x120]
mov rdx, rax
mov rax, qword [rbp + 0x120]
mov rax, qword [rax]
call qword [rax + 0x58]
call sub.kernel32.dll_GetTickCount_1
mov dword [rbp + 0xcc], eax
mov rcx, qword [rbp + 0x120]
mov rax, qword [rbp + 0x140]
lea rax, [rax + rbp + 0x1a8]
mov rdx, rbp
neg rdx
mov rdx, qword [rax + rdx]
xor r8, r8
xor r9, r9
lea rax, [rbp + 0x11e]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x120]
mov rax, qword [rax]
call qword [rax + 0xc8]
jmp 0x4f8d2e
nop
lea rcx, [rbp + 0x40]
mov rax, qword [rbp + 0x140]
lea rax, [rax + rbp + 0x1a8]
mov rdx, rbp
neg rdx
mov rdx, qword [rax + rdx]
call fcn.0040c110
lea rcx, [rbp + 0x30]
mov rax, qword [rbp + 0x140]
lea rax, [rax + rbp + 0x1c0]
mov rdx, rbp
neg rdx
mov rdx, qword [rax + rdx]
mov rax, qword [rbp + 0x140]
lea rax, [rax + rbp + 0x1c8]
mov r8, rbp
neg r8
mov r8, qword [rax + r8]
call fcn.004f8260
lea rcx, [rbp + 0x38]
mov rdx, qword [rbp + 0x30]
call fcn.00425ea0
mov rcx, qword [rbp + 0x40]
mov rdx, qword [rbp + 0x38]
call fcn.0040c5d0
test eax, eax
je 0x4f8a78
mov dword [rbp + 0x118], 0xffffffff
xor rcx, rcx
mov rdx, qword [rbp + 0x48]
call fcn.004f8e30
jmp 0x4f8d47
lea rcx, [rbp + 0xf0]
call fcn.0040f960
mov rcx, qword [rbp + 0x120]
mov rdx, rax
mov rax, qword [rbp + 0x120]
mov rax, qword [rax]
call qword [rax + 0x50]
cmp qword [rbp + 0xf0], 0
jne 0x4f8ab6
xor rcx, rcx
mov rdx, qword [rbp + 0x48]
call fcn.004f8e30
jmp 0x4f8d2e
lea rcx, [rbp + 0xe0]
call fcn.0040f960
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [0x00536c48]
mov r8, rax
mov rax, qword [rbp + 0xf0]
mov rax, qword [rax]
call qword [rax]
mov dword [rbp + 0x64], eax
mov eax, dword [rbp + 0x64]
test eax, 0x80000000
sete al
mov byte [rbp + 0x63], al
cmp byte [rbp + 0x63], 0
jne 0x4f8b08
xor rcx, rcx
mov rdx, qword [rbp + 0x48]
call fcn.004f8e30
jmp 0x4f8d2e
cmp qword [rbp + 0xe0], 0
jne 0x4f8b23
xor rcx, rcx
mov rdx, qword [rbp + 0x48]
call fcn.004f8e30
jmp 0x4f8d2e
lea rcx, [rbp + 0xd0]
call fcn.0040f960
mov rcx, qword [rbp + 0xe0]
mov rdx, rax
mov rax, qword [rbp + 0xe0]
mov rax, qword [rax]
call qword [rax + 0x308]
mov dword [rbp + 0x5c], eax
mov eax, dword [rbp + 0x5c]
test eax, 0x80000000
sete al
mov byte [rbp + 0x5b], al
cmp byte [rbp + 0x5b], 0
jne 0x4f8b72
xor rcx, rcx
mov rdx, qword [rbp + 0x48]
call fcn.004f8e30
jmp 0x4f8d2e
cmp qword [rbp + 0xd0], 0
jne 0x4f8b8d
xor rcx, rcx
mov rdx, qword [rbp + 0x48]
call fcn.004f8e30
jmp 0x4f8d2e
lea rcx, [rbp + 0xc0]
call fcn.0040aa80
mov rcx, qword [rbp + 0xd0]
mov rdx, rax
mov rax, qword [rbp + 0xd0]
mov rax, qword [rax]
call qword [rax + 0x420]
mov rcx, qword [rbp + 0xc0]
lea rdx, [0x004f90b4]
call fcn.0040be40
test eax, eax
jne 0x4f8bdb
xor rcx, rcx
mov rdx, qword [rbp + 0x48]
call fcn.004f8e30
jmp 0x4f8d2e
lea rcx, [rbp + 0xc0]
call fcn.0040aa80
mov rcx, qword [rbp + 0xd0]
mov rdx, rax
mov rax, qword [rbp + 0xd0]
mov rax, qword [rax]
call qword [rax + 0x430]
mov rcx, qword [rbp + 0xc0]
lea rdx, [0x004f90c4]
call fcn.0040be40
test eax, eax
jne 0x4f8c29
xor rcx, rcx
mov rdx, qword [rbp + 0x48]
call fcn.004f8e30
jmp 0x4f8d2e
mov rcx, qword [rbp + 0xc0]
lea rdx, [0x004f90d8]
call fcn.0040be40
test eax, eax
jne 0x4f8c61
mov rcx, qword [rbp + 0xf0]
call fcn.004f83f0
test al, al
je 0x4f8c61
xor rcx, rcx
mov rdx, qword [rbp + 0x48]
call fcn.004f8e30
jmp 0x4f8d2e
add dword [rbp + 0x118], 1
call sub.kernel32.dll_GetTickCount_1
mov ecx, dword [rbp + 0xcc]
add ecx, 0x1f4
cmp ecx, eax
jae 0x4f8ca3
jmp 0x4f8c8f
call sub.kernel32.dll_GetCurrentThread
mov rcx, rax
xor rdx, rdx
call sub.kernel32.dll_WaitForSingleObject
call fcn.004ade00
test al, al
jne 0x4f8c7f
call sub.kernel32.dll_GetTickCount_1
mov dword [rbp + 0xcc], eax
nop
mov rcx, qword [rbp + 0x128]
lea rdx, [0x004f90ec]
mov r8, qword [rbp + 0x120]
mov rax, qword [rbp + 0x128]
mov rax, qword [rax]
call qword [rax + 0xb8]
lea rcx, [rbp + 0x120]
call fcn.0040f960
mov rcx, qword [rbp + 0x128]
mov rdx, rax
mov rax, qword [rbp + 0x128]
mov rax, qword [rax]
call qword [rax + 0x58]
mov rcx, qword [rbp + 0x120]
mov rax, qword [rbp + 0x140]
lea rax, [rax + rbp + 0x1a8]
mov rdx, rbp
neg rdx
mov rdx, qword [rax + rdx]
xor r8, r8
xor r9, r9
lea rax, [rbp + 0x11e]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x120]
mov rax, qword [rax]
call qword [rax + 0xc8]
cmp word [rbp + 0x11e], 0
jne 0x4f89e1
jmp 0x4f8d46
nop
lea rcx, [rbp + 0x30]
mov edx, 3
call fcn.0040aac0
lea rcx, [rbp + 0x98]
mov rdx, qword [0x004cee00]
mov r8d, 2
call fcn.0040cdf0
lea rcx, [rbp + 0xb8]
call fcn.0040f960
lea rcx, [rbp + 0xc0]
call fcn.0040aa80
lea rcx, [rbp + 0xd0]
call fcn.0040f960
lea rcx, [rbp + 0xd8]
call fcn.0040f960
lea rcx, [rbp + 0xe0]
call fcn.0040f960
lea rcx, [rbp + 0xe8]
mov rdx, qword [0x004cedb0]
mov r8d, 2
call fcn.0040cdf0
lea rcx, [rbp + 0xf8]
call fcn.0040f960
lea rcx, [rbp + 0x100]
call fcn.0040f960
lea rcx, [rbp + 0x108]
mov rdx, qword [0x00402270]
mov r8d, 2
call fcn.0040cdf0
lea rcx, [rbp + 0x120]
mov rdx, qword [0x004cee50]
mov r8d, 2
call fcn.0040cdf0
lea rcx, [rbp + 0x148]
call fcn.0040f960
mov eax, dword [rbp + 0x118]
lea rsp, [rbp + 0x130]
pop rbp
ret