Function at 0x4712f5
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x64
push ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
push esi
push edi
push 0
push 1
mov ecx, ebx
call dword [eax + 4]
test eax, eax
je 0x4716f5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebx + 0x2468]
mov edx, dword [ecx]
mov dword [ebx + 0x26b4], eax
cmp edx, 0xa
jb 0x471333
push 0xa
pop edx
and dword [esp + 0xc], 0
lea esi, [ebx + 0x26bc]
mov dword [ecx], edx
mov dword [ebx + 0x26e0], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], esi
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
sar eax, 3
cmp eax, 5
jae 0x47137f
and dword [esp + 0x28], 0
xor eax, eax
lea edi, [esp + 0x2c]
stosd dword es:[edi], eax
lea eax, [esp + 0x28]
push eax
mov eax, esi
call fcn.00474f78
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 5
jl 0x47134e
lea eax, [ebx + 0x62ee8]
push eax
mov dword [esp + 0x24], eax
call fcn.005901bf
pop ecx
push 0
push ebx
call fcn.0047103e
jmp 0x4715f7
cmp dword [ebx + 0x5d120], 7
je 0x4713c5
lea edi, [ebx + 0x26b0]
cmp dword [edi], 0
je 0x4713c5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebx + 0x26b4]
cmp eax, dword [edi]
ja 0x471707
and dword [esp + 0x44], 0
push 0xa
xor eax, eax
pop ecx
lea edi, [esp + 0x48]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x44]
mov ecx, ebx
call fcn.00470fd2
cmp eax, 1
jbe 0x4716c4
mov edi, 0x1f4
push edi
push 0
lea ecx, [esp + 0x4c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
cmp ecx, edi
jb 0x471534
xor eax, eax
lea edi, [esp + 0x2c]
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x26d4]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
push eax
mov eax, esi
mov dword [esp + 0x30], ecx
call fcn.00474f78
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
sar eax, 3
cmp eax, 6
jbe 0x47147e
mov ebx, dword [esi + 0xc]
mov edi, esi
lea esi, [esp + 0x3c]
call fcn.004754c4
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x40]
push dword [edi + 0x10]
lea ecx, [ebx + 8]
mov edx, ebx
call fcn.004759f7
add dword [edi + 0x10], 0xfffffff8
pop ecx
lea esi, [esp + 0x10]
call fcn.004754c4
mov ebx, dword [ebp + 8]
mov esi, edi
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
and eax, 0xfffffff8
cmp eax, 0x30
jne 0x471525
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
xor edi, edi
sar eax, 3
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], edi
test eax, eax
jbe 0x4714ee
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
sar eax, 3
cmp edi, eax
jb 0x4714b9
call fcn.005908ee
mov eax, dword [esi + 0xc]
mov eax, dword [eax + edi*8 + 4]
add dword [esp + 0x10], eax
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
sar eax, 3
cmp edi, eax
jb 0x4714d6
call fcn.005908ee
mov eax, dword [esi + 0xc]
mov eax, dword [eax + edi*8]
add dword [esp + 0xc], eax
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
inc edi
sar eax, 3
cmp edi, eax
jb 0x4714a7
mov eax, dword [esp + 0xc]
fild dword [esp + 0xc]
test eax, eax
jge 0x471500
fadd qword [0x5fdc58]
mov eax, dword [esp + 0x10]
fild dword [esp + 0x10]
test eax, eax
jge 0x471512
fadd qword [0x5fdc58]
fdivp st(1)
fmul qword [0x5fdc78]
call fcn.005969d6
mov dword [ebx + 0x26b8], eax
mov eax, dword [esp + 0x1c]
and dword [ebx + 0x26d4], 0
mov dword [esp + 0x10], eax
lea eax, [esp + 0x30]
push eax
call fcn.005901bf
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x38]
pop ecx
mov ecx, dword [esp + 0x30]
sub ecx, dword [eax]
sbb edx, dword [eax + 4]
mov dword [ebx + 0x62ef0], ecx
mov dword [ebx + 0x62ef4], edx
mov edx, dword [ebx + 0x26b8]
test edx, edx
je 0x47159f
mov eax, dword [ebx + 0x5d128]
mov ecx, dword [ebx + 0x5d12c]
mov edi, eax
and edi, ecx
cmp edi, 0xffffffff
je 0x47159f
sub eax, dword [ebx + 0x5d138]
push 0
sbb ecx, dword [ebx + 0x5d13c]
push edx
push ecx
push eax
call fcn.0059eb40
mov dword [ebx + 0x62ef8], eax
mov dword [ebx + 0x62efc], edx
jmp 0x4715ad
and dword [ebx + 0x62ef8], 0
and dword [ebx + 0x62efc], 0
mov eax, dword [esp + 0x24]
cmp eax, 0xffffffff
je 0x4716eb
cmp eax, 0x102
jne 0x471604
cmp dword [ebx + 0x246c], 6
jne 0x47139d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebx + 0x26a8]
mov edx, eax
sub edx, dword [ecx]
cmp edx, 0x3e8
jbe 0x47139d
mov dword [ecx], eax
mov eax, dword [ebx]
push 0
push 6
mov ecx, ebx
call dword [eax + 4]
test eax, eax
jne 0x47139d
jmp 0x4716f5
test eax, eax
je 0x4716fe
lea edi, [eax - 1]
lea esi, [ebx + 0x26ec]
call fcn.004750c1
mov esi, dword [eax]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x26d8], eax
mov eax, dword [esi + 0x10]
test eax, eax
je 0x471643
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push dword [esi + 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [esi + 0x10], 0
mov esi, dword [esi + 0x28]
cmp esi, 0xa
ja case.default.0x47164b
jmp dword [esi*4 + 0x471715]
push edi
push ebx
call fcn.00471741
jmp 0x4716b7
push edi
call fcn.004717c9
mov ebx, dword [ebp + 8]
jmp 0x4716b7
push edi
call fcn.0047186d
jmp 0x471661
push edi
call fcn.00471969
jmp 0x471661
push ebx
mov eax, edi
call fcn.00472139
jmp 0x4716b7
mov eax, edi
call fcn.004721c5
jmp 0x471661
push edi
call fcn.00472271
jmp 0x471661
push edi
call fcn.0047236d
jmp 0x471661
push edi
push ebx
call fcn.0047254b
jmp 0x4716b7
push edi
push ebx
call fcn.00472686
jmp 0x4716b7
push edi
mov eax, ebx
call fcn.00472802
jmp 0x4716b7
xor eax, eax
test eax, eax
je 0x4716eb
mov esi, dword [esp + 0x18]
jmp 0x47139d
cmp dword [ebx + 0x271c], 0
je 0x4716f5
mov eax, dword [ebx + 0x5d13c]
cmp eax, dword [ebx + 0x5d12c]
ja 0x4716f5
jb 0x4716eb
mov eax, dword [ebx + 0x5d138]
cmp eax, dword [ebx + 0x5d128]
jae 0x4716f5
mov dword [ebx + 0x5d120], 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [ebx + 0x5d120], 7
je 0x4716f5
mov dword [ebx + 0x5d120], 9
jmp 0x4716f5