Function at 0x40733c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0x294
mov eax, 0x47b42d
call fcn.0044ef10
xor ebx, ebx
test byte [0x4b5fb0], 1
jne 0x4073a3
or dword [0x4b5fb0], 1
mov dword [ebp - 4], ebx
mov dword [0x4b5f28], ebx
call fcn.00407a5b
mov dword [0x4b5f24], eax
mov dword [eax], eax
mov eax, dword [0x4b5f24]
mov dword [eax + 4], eax
mov eax, dword [0x4b5f24]
mov dword [eax + 8], eax
mov eax, dword [0x4b5f24]
mov byte [eax + 0x10], 1
mov eax, dword [0x4b5f24]
push 0x47f7e7
mov byte [eax + 0x11], 1
call fcn.0043ee89
or dword [ebp - 4], 0xffffffff
pop ecx
cmp dword [0x4b5e20], ebx
je 0x4073c5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x4b5e20]
add ecx, 0x493e0
cmp ecx, eax
jae 0x407650
push 0x228
call fcn.0043e996
pop ecx
cmp eax, ebx
je 0x4073e5
mov esi, eax
call fcn.0040b28f
mov esi, eax
mov dword [ebp - 0x294], esi
jmp 0x4073ed
mov dword [ebp - 0x294], ebx
mov esi, ebx
mov dword [ebp - 0x298], esi
cmp esi, ebx
je 0x407401
lea eax, [esi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov dword [ebp - 4], 1
cmp esi, ebx
jne 0x407413
mov byte [0x4af5b7], 1
mov eax, dword [esi]
push ebx
push 0x64
mov ecx, esi
call dword [eax + 0xc]
test eax, eax
jne 0x407428
mov byte [0x4af5b7], 1
mov byte [ebp - 0x1c], bl
xor eax, eax
lea edi, [ebp - 0x1b]
stosd dword es:[edi], eax
push ebx
stosd dword es:[edi], eax
push 0xa
lea ecx, [ebp - 0x1c]
push ecx
stosb byte es:[edi], al
mov eax, dword [esi]
push 0x48fec0
mov ecx, esi
call dword [eax + 0x1c]
push 0xf
mov dword [ebp - 0x290], eax
pop edi
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x240], edi
mov dword [ebp - 0x244], ebx
mov byte [ebp - 0x254], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x407467
sub eax, ecx
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x254]
call fcn.004047a2
mov byte [ebp - 4], 2
cmp dword [ebp - 0x290], ebx
je 0x4074bd
push 0x48fed4
lea edx, [ebp - 0x254]
call fcn.00407b0f
pop ecx
test al, al
je 0x4074bd
push 0x48fed8
push 2
push 4
pop edi
call fcn.0040b067
pop ecx
pop ecx
mov byte [0x4af5b7], bl
jmp 0x40762b
push 0x1ff
lea eax, [ebp - 0x21b]
push ebx
push eax
mov byte [0x4af5b7], 1
mov byte [ebp - 0x21c], bl
call fcn.0043fd80
mov eax, dword [esi]
add esp, 0xc
push ebx
push 0x200
lea ecx, [ebp - 0x21c]
push ecx
push 0x48ff04
mov ecx, esi
call dword [eax + 0x1c]
mov dword [ebp - 0x290], eax
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x224], edi
mov dword [ebp - 0x228], ebx
mov byte [ebp - 0x238], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x407519
sub eax, edi
push eax
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x238]
call fcn.004047a2
mov byte [ebp - 4], 3
cmp dword [ebp - 0x290], 1
jne 0x40761d
cmp dword [ebp - 0x228], ebx
je 0x40761d
call fcn.00407924
push 1
lea eax, [ebp - 0x238]
call fcn.00407966
mov edi, eax
cmp edi, 0xffffffff
je 0x40761d
push edi
push ebx
lea eax, [ebp - 0x238]
push eax
lea esi, [ebp - 0x270]
call fcn.004078d3
mov byte [ebp - 4], 4
cmp dword [ebp - 0x25c], 0x10
mov eax, dword [ebp - 0x270]
jae 0x407598
mov eax, esi
push eax
call fcn.0043f813
mov dword [ebp - 0x290], eax
pop ecx
lea eax, [ebp - 0x290]
push eax
call fcn.00407d1d
push eax
lea esi, [ebp - 0x2a0]
call fcn.00407b36
push 0xffffffffffffffff
inc edi
push edi
lea eax, [ebp - 0x238]
push eax
lea esi, [ebp - 0x28c]
call fcn.004078d3
push eax
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 5
call fcn.00404817
push ebx
push 1
mov ecx, esi
call fcn.004049a6
push 1
lea eax, [ebp - 0x238]
call fcn.00407966
push ebx
push 1
lea ecx, [ebp - 0x270]
mov edi, eax
mov byte [ebp - 4], 3
call fcn.004049a6
cmp edi, 0xffffffff
jne 0x40756f
mov esi, dword [ebp - 0x294]
push ebx
push 1
lea ecx, [ebp - 0x238]
call fcn.004049a6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ebx
push 1
lea ecx, [ebp - 0x254]
mov dword [0x4b5e20], eax
call fcn.004049a6
or dword [ebp - 4], 0xffffffff
add esi, 4
call fcn.004078fe
mov eax, dword [0x4b5f24]
mov ecx, dword [eax + 4]
mov edx, eax
cmp byte [ecx + 0x11], bl
jne 0x407677
mov esi, dword [ebp + 8]
cmp dword [ecx + 0xc], esi
jae 0x40766c
mov ecx, dword [ecx + 8]
jmp 0x407670
mov edx, ecx
mov ecx, dword [ecx]
cmp byte [ecx + 0x11], bl
je 0x40765f
jmp 0x40767a
mov esi, dword [ebp + 8]
mov dword [ebp - 0x294], edx
cmp edx, eax
je 0x407691
cmp esi, dword [edx + 0xc]
jb 0x407691
lea ecx, [ebp - 0x294]
jmp 0x40769d
mov dword [ebp - 0x290], eax
lea ecx, [ebp - 0x290]
cmp dword [ecx], eax
je 0x4076ba
push esi
push 0x48ff20
push 2
push 4
pop edi
call fcn.0040b067
add esp, 0xc
mov byte [0x4af5b7], bl
mov al, byte [0x4af5b7]
call fcn.0044ef93
ret 4