Function at 0x4c85f5
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [ebp + 8], 2
push ebx
mov ebx, ecx
jne 0x4c889b
call fcn.004c416f
cmp dword [eax + 0x824], 0
jne 0x4c88c1
call fcn.00403a64
push eax
lea ecx, [ebp + 8]
call fcn.00402a6b
mov eax, dword [ebx + 0xe0]
cmp eax, dword [ebx + 0xf4]
je 0x4c8661
push 0x41a
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [ebx + 0xe0]
cmp ecx, 0x62
jl 0x4c8652
push 0x62
pop ecx
push 0
push ecx
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
push edi
push dword [ebx + 0xec]
lea esi, [ebx + 0xd8]
mov ecx, esi
call fcn.0041d68d
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
test eax, eax
je 0x4c86d4
push dword [esi]
call fcn.00402f1d
test eax, eax
je 0x4c86d4
push dword [ebx + 0xe8]
lea eax, [ebp - 0x10]
push eax
call fcn.004c290f
push dword [esi]
push dword [eax]
lea eax, [ebp + 8]
push str.ck_Wkb
push eax
call fcn.00415254
mov ecx, dword [ebp - 0x10]
add esp, 0x18
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov esi, dword [ebp + 8]
mov ecx, ebx
push esi
push 0x41b
call fcn.004c93f8
call edi
mov dword [ebx + 0xd4], eax
jmp 0x4c86d7
mov esi, dword [ebp + 8]
cmp dword [ebx + 0x104], 0
je 0x4c8700
call edi
sub eax, dword [ebx + 0xd4]
cmp eax, 0x1388
jbe 0x4c8700
push 0x54519c
push 0x41b
mov ecx, ebx
call fcn.004c93f8
mov eax, dword [ebx + 0xe4]
cmp eax, dword [ebx + 0xf8]
je 0x4c887d
call fcn.00403a64
push eax
lea ecx, [ebp - 4]
call fcn.00402a6b
call fcn.00403a64
push eax
lea ecx, [ebp - 0x10]
call fcn.00402a6b
call fcn.00403a64
push eax
lea ecx, [ebp - 0xc]
call fcn.00402a6b
mov esi, dword [ebx + 0xe4]
mov edi, 0xf4240
mov dword [ebp - 8], esi
mov ecx, 0x3e8
cmp esi, edi
jb 0x4c877f
xor edx, edx
mov eax, esi
div edi
push eax
lea eax, [ebp - 4]
push 0x52ce00
push eax
call fcn.00415254
mov eax, esi
xor edx, edx
mov ecx, 0x3e8
add esp, 0xc
div ecx
imul esi, edx, 0x3e8
mov dword [ebp - 8], esi
mov edi, dword [ebp - 4]
mov eax, dword [edi - 0xc]
test eax, eax
jne 0x4c8791
cmp esi, ecx
jb 0x4c87b9
test eax, eax
je 0x4c8798
mov ecx, 0x5451b8
jmp 0x4c879d
mov ecx, 0x52ce00
mov eax, esi
xor edx, edx
mov esi, 0x3e8
div esi
push eax
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 8], edx
push eax
call fcn.00415254
add esp, 0xc
call fcn.00403a64
push eax
lea ecx, [ebp - 4]
call fcn.00402a6b
mov esi, dword [ebp - 0x10]
mov eax, 0x5451b8
cmp dword [esi - 0xc], 0
jne 0x4c87da
mov eax, 0x52ce00
push dword [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.00415254
add esp, 0xc
lea eax, [ebp - 0xc]
lea ecx, [ebp + 8]
push eax
call fcn.00402bd6
cmp dword [esi - 0xc], 0
je 0x4c881d
push dword [ebp + 8]
lea eax, [ebp - 4]
push esi
push 0x5451c4
push eax
call fcn.00415254
add esp, 0x10
lea eax, [ebp - 4]
lea ecx, [ebp + 8]
push eax
call fcn.00402bd6
cmp dword [edi - 0xc], 0
je 0x4c8844
push dword [ebp + 8]
lea eax, [ebp - 4]
push edi
push 0x5451c4
push eax
call fcn.00415254
add esp, 0x10
lea eax, [ebp - 4]
lea ecx, [ebp + 8]
push eax
call fcn.00402bd6
mov esi, dword [ebp + 8]
mov ecx, ebx
push esi
push 0x41e
call fcn.004c93f8
mov ecx, dword [ebp - 4]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0xc]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.004042e9
lea ecx, [edi - 0x10]
call fcn.004042e9
lea eax, [ebx + 0xd8]
push eax
lea ecx, [ebx + 0xec]
call fcn.004c5ab6
lea ecx, [esi - 0x10]
call fcn.004042e9
pop edi
pop esi
jmp 0x4c88c1
cmp dword [ebp + 8], 3
jne 0x4c88c1
push 3
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push 0
push 0x418
push 0x111
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
pop ebx
leave
ret 4