Function at 0x4b691c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
cmp dword [eax + 0x700], 1
jne 0x4b6a25
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
cmp dword [eax + 0x718], 0x14
jge 0x4b69d9
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
sub eax, dword [edx + 0x720]
cmp eax, 0x64
jbe 0x4b6bd6
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x718]
mov ecx, 5
cdq
idiv ecx
cmp edx, 4
jne 0x4b6994
mov eax, 6
call fcn.00403324
inc eax
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov dword [edx + 0x70c], eax
jmp 0x4b69b7
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x718]
mov ecx, 5
cdq
idiv ecx
add edx, 8
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov dword [eax + 0x70c], edx
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov dword [edx + 0x720], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
inc dword [eax + 0x718]
jmp 0x4b6bd6
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x708]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov dword [edx + 0x70c], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
sub eax, dword [edx + 0x720]
cmp eax, 0x5dc
jbe 0x4b6bd6
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x404]
xor edx, edx
call fcn.0047fe50
jmp 0x4b6bd6
mov byte [ebp - 5], 1
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x700]
dec eax
test eax, eax
jl 0x4b6bbd
inc eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 4], 0
mov eax, dword [ebp - 4]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov eax, dword [edx + eax*4 + 0x718]
mov edx, dword [ebp - 4]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx - 4]
cmp eax, dword [ecx + edx*4 + 0x71c]
jge 0x4b6b5c
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 4]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx - 4]
sub eax, dword [ecx + edx*4 + 0x720]
cmp eax, 0x64
jbe 0x4b6b56
mov eax, dword [ebp - 4]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov eax, dword [edx + eax*4 + 0x718]
mov ecx, 5
cdq
idiv ecx
cmp edx, 4
jne 0x4b6aea
mov eax, 6
call fcn.00403324
inc eax
mov edx, dword [ebp - 4]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx - 4]
mov dword [ecx + edx*4 + 0x70c], eax
jmp 0x4b6b23
mov eax, dword [ebp - 4]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov eax, dword [edx + eax*4 + 0x718]
mov ecx, 5
cdq
idiv ecx
add edx, 8
mov eax, dword [ebp - 4]
mov ecx, eax
shl eax, 3
sub eax, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx - 4]
mov dword [ecx + eax*4 + 0x70c], edx
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 4]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx - 4]
mov dword [ecx + edx*4 + 0x720], eax
mov eax, dword [ebp - 4]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
inc dword [edx + eax*4 + 0x718]
mov byte [ebp - 5], 0
jmp 0x4b6bb1
mov eax, dword [ebp - 4]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov eax, dword [edx + eax*4 + 0x708]
mov edx, dword [ebp - 4]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx - 4]
mov dword [ecx + edx*4 + 0x70c], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 4]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx - 4]
sub eax, dword [ecx + edx*4 + 0x720]
cmp eax, 0x7d0
jae 0x4b6bb1
mov byte [ebp - 5], 0
inc dword [ebp - 4]
dec dword [ebp - 0xc]
jne 0x4b6a49
cmp byte [ebp - 5], 0
je 0x4b6bd6
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x404]
xor edx, edx
call fcn.0047fe50
mov esp, ebp
pop ebp
ret