Function at 0x428801
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4a42e7
mov eax, dword fs:[0]
push eax
sub esp, 0x30
push ebx
push esi
push edi
mov eax, dword [0x4d6674]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0x1c], ebx
call fcn.0046df20
push eax
lea ecx, [esp + 0x18]
call fcn.0046e14b
mov dword [esp + 0x48], ebx
fldz
lea edi, [esi + 0x3e4]
fst qword [esp + 0x24]
cmp dword [edi], ebx
fstp qword [esp + 0x2c]
mov ebx, dword [sym.imp.KERNEL32.DLL_GetTickCount]
jne 0x428866
call ebx
mov dword [edi], eax
cmp dword [esi + 0x118], 0
je 0x428885
lea eax, [esp + 0x14]
push 0x4b578c
push eax
call fcn.00401a10
pop ecx
pop ecx
jmp 0x428cbf
cmp dword [esi + 0x2dc], 0
je 0x4288f1
call fcn.0046df20
push eax
lea ecx, [esp + 0x1c]
call fcn.0046e14b
lea eax, [esp + 0x1c]
push 0x198
push eax
mov byte [esp + 0x50], 1
call fcn.004614c1
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x4c], 2
call fcn.0040189c
mov byte [esp + 0x48], 1
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp + 8]
lea eax, [esp + 0x18]
push eax
call fcn.004019f2
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x428ccc
call ebx
sub eax, dword [esi + 0x3e0]
mov edx, dword [esi + 0x160]
mov ecx, dword [esi + 0x164]
mov edi, edx
sub edi, dword [esi + 0x2c8]
mov dword [esp + 0x18], eax
sbb ecx, dword [esi + 0x2cc]
mov dword [esp + 0x1c], edi
mov edi, dword [esi + 0x1a4]
mov dword [esp + 0x20], ecx
mov ecx, dword [esi + 0x1a0]
sub ecx, dword [esi + 0x1b0]
sbb edi, dword [esi + 0x1b4]
test eax, eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], edi
jne 0x42894b
mov dword [esp + 0x18], 1
fild dword [esp + 0x18]
mov eax, dword [esi + 0x168]
mov ecx, dword [esi + 0x16c]
mov edi, eax
fdiv qword [0x4bd858]
add edi, dword [esi + 0x180]
mov ebx, ecx
adc ebx, dword [esi + 0x184]
add eax, edx
adc ecx, dword [esi + 0x164]
fild qword [esp + 0x1c]
fld qword [0x4bd830]
fmul st(1), st(0)
fxch st(1)
fdiv st(2)
fild qword [esp + 0x34]
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], ebx
xor edi, edi
cmp dword [esi + 0x3dc], edi
fmul st(2)
fdivrp st(3)
fild qword [esp + 0x34]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
fmul st(2)
fild qword [esp + 0x34]
fmulp st(3)
fsubrp st(2)
fxch st(1)
fstp qword [esp + 0x34]
jne 0x4289c5
mov dword [esi + 0x3d8], edi
mov eax, dword [esi + 0x3d8]
fstp qword [esi + eax*8 + 0x2e8]
mov eax, dword [esi + 0x3d8]
push 0xf
fstp qword [esi + eax*8 + 0x360]
mov eax, dword [esi + 0x3d8]
inc eax
pop ebx
cdq
mov ecx, ebx
idiv ecx
mov eax, dword [esi + 0x3dc]
cmp eax, ebx
mov dword [esi + 0x3d8], edx
jge 0x428a55
inc eax
cmp eax, edi
mov dword [esp + 0x1c], eax
mov dword [esi + 0x3dc], eax
jle 0x428a25
lea ecx, [esi + 0x2e8]
mov edx, eax
fld qword [esp + 0x24]
fadd qword [ecx]
add ecx, 8
dec edx
fstp qword [esp + 0x24]
jne 0x428a15
cmp eax, edi
fild dword [esp + 0x1c]
fld qword [esp + 0x24]
fdiv st(1)
fstp qword [esp + 0x24]
jle 0x428a97
mov ecx, dword [esi + 0x3dc]
lea eax, [esi + 0x360]
fld qword [eax]
add eax, 8
dec ecx
fadd qword [esp + 0x2c]
fstp qword [esp + 0x2c]
jne 0x428a43
jmp 0x428a97
lea eax, [esi + 0x2e8]
mov ecx, ebx
fld qword [eax]
add eax, 8
dec ecx
fadd qword [esp + 0x24]
fstp qword [esp + 0x24]
jne 0x428a5d
fld qword [esp + 0x24]
lea eax, [esi + 0x360]
fld qword [0x4bd850]
mov ecx, ebx
fdiv st(1), st(0)
fxch st(1)
fstp qword [esp + 0x24]
fld qword [eax]
add eax, 8
dec ecx
fadd qword [esp + 0x2c]
fstp qword [esp + 0x2c]
jne 0x428a87
fdivr qword [esp + 0x2c]
fldz
fcom qword [esp + 0x24]
fnstsw ax
test ah, 0x41
jne 0x428ae7
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x428ad8
fstp st(1)
mov dword [esi + 0x3dc], edi
fst qword [esp + 0x24]
lea eax, [esi + 0x360]
fld st(0)
mov ecx, ebx
jmp 0x428acb
fxch st(1)
fxch st(1)
fst qword [eax - 0x78]
fst qword [eax]
add eax, 8
dec ecx
jne 0x428ac9
fcom qword [esp + 0x24]
fnstsw ax
test ah, 0x41
jne 0x428ae7
fst qword [esp + 0x24]
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x428af4
fstp st(1)
jmp 0x428af6
fstp st(0)
fld qword [esp + 0x24]
fstp qword [esi + 0x1c8]
fst qword [esi + 0x1d0]
fld qword [esi + 0x1d8]
fcomp qword [esp + 0x24]
fnstsw ax
fld qword [0x4bd810]
test ah, 5
fld qword [0x4bd808]
jp 0x428b37
fld qword [esi + 0x1d8]
fmul st(2)
fadd qword [esp + 0x24]
fmul st(1)
fstp qword [esi + 0x1d8]
fld qword [esi + 0x1e0]
fcomp st(3)
fnstsw ax
test ah, 5
jp 0x428b5c
fld qword [esi + 0x1e0]
fmulp st(2)
fxch st(1)
faddp st(2)
fmulp st(1)
fstp qword [esi + 0x1e0]
jmp 0x428b62
fstp st(1)
fstp st(0)
fstp st(0)
call fcn.0043e04a
fld qword [esi + 0x1c8]
call fcn.0048de30
fldz
mov edx, dword [esi + 0x20c]
fcom qword [esp + 0x24]
mov ecx, dword [esi + 0x274]
mov dword [ecx + edx*4 + 0x228], eax
xor eax, eax
inc eax
mov dword [ecx + 0xc], eax
mov dword [0x4db168], eax
mov dword [0x4db16c], eax
fnstsw ax
test ah, 0x44
jp 0x428baa
mov dword [esi + 0x3dc], edi
jmp 0x428bb9
fld qword [esp + 0x34]
fdiv qword [esp + 0x24]
call fcn.0048de30
mov edi, eax
fcomp qword [esp + 0x24]
mov dword [esi + 0x208], edi
fnstsw ax
test ah, 1
je 0x428c43
mov eax, dword [esi + 0x2c8]
cmp eax, dword [esi + 0x160]
jne 0x428be6
mov eax, dword [esi + 0x2cc]
cmp eax, dword [esi + 0x164]
je 0x428c43
mov eax, dword [esi + 0x180]
or eax, dword [esi + 0x184]
je 0x428c43
lea eax, [esp + 0x1c]
push 0x17a
push eax
call fcn.004614c1
push 0x3c
mov byte [esp + 0x54], 3
mov ecx, dword [eax]
pop ebx
mov eax, edi
cdq
idiv ebx
push edx
cdq
idiv ebx
mov eax, edi
mov edi, 0xe10
push edx
cdq
idiv edi
push eax
push ecx
lea eax, [esp + 0x2c]
push eax
call fcn.00401a10
mov byte [esp + 0x64], 0
mov ecx, dword [esp + 0x38]
add esp, 0x1c
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x428c54
lea eax, [esp + 0x14]
push str._:__:__
push eax
call fcn.00401a10
pop ecx
pop ecx
lea eax, [esp + 0x14]
lea ecx, [esi + 0x3e8]
push eax
call fcn.0040189c
call fcn.00489565
push 0xa
cdq
pop ecx
idiv ecx
test edx, edx
jne 0x428c83
mov edi, dword [esi + 0x274]
lea eax, [esp + 0x14]
push eax
call fcn.0040b395
mov eax, dword [esi + 0x160]
mov dword [esi + 0x2c8], eax
mov eax, dword [esi + 0x164]
mov dword [esi + 0x2cc], eax
mov eax, dword [esi + 0x1a0]
mov dword [esi + 0x1b0], eax
mov eax, dword [esi + 0x1a4]
mov dword [esi + 0x1b4], eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [esi + 0x3e0], eax
mov ecx, dword [ebp + 8]
lea eax, [esp + 0x14]
push eax
call fcn.004019f2
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4