Function at 0x473690
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d124f
mov eax, dword fs:[0]
push eax
sub esp, 0x130
mov eax, dword [0x4f59b8]
xor eax, esp
mov dword [esp + 0x128], eax
push ebx
push esi
push edi
mov eax, dword [0x4f59b8]
xor eax, esp
push eax
lea eax, [esp + 0x140]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x20]
mov edi, dword [ebp + 0xc]
mov esi, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x134]
test eax, eax
mov dword [esp + 0x10], edi
je 0x473afe
mov ecx, dword [esi + 0x138]
sub ecx, eax
sar ecx, 2
je 0x473afe
mov al, byte [ebp + 0x1c]
movzx edx, al
and edx, 4
test al, 1
mov ecx, edx
je 0x473719
test al, 0x10
je 0x473719
mov eax, 1
jmp 0x47371b
xor eax, eax
test ecx, ecx
jne 0x473ade
test eax, eax
jne 0x473ade
cmp dword [ebp + 0x24], eax
jle 0x473afe
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
sub eax, dword [esi + 0x110]
cmp eax, 0xea60
jbe 0x47375f
call edi
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x110], eax
mov eax, dword [ecx]
mov eax, dword [eax + 4]
lea edx, [esi + 0x28]
push edx
call eax
mov ebx, dword [ebp + 8]
cmp ebx, 1
jne 0x473778
fild dword [ebp + 0x24]
fadd qword [esi + 0x118]
fstp qword [esi + 0x118]
jmp 0x47378c
cmp ebx, 2
jne 0x47378c
fild dword [ebp + 0x24]
fadd qword [esi + 0x120]
fstp qword [esi + 0x120]
call edi
sub eax, dword [esi + 0x114]
cmp eax, 0xdbba00
jbe 0x4738fa
call edi
mov dword [esi + 0x114], eax
call fcn.0040b650
fstp qword [esp + 0x14]
lea ecx, [esp + 0xcc]
call fcn.00472620
lea ecx, [esp + 0x48]
push ecx
mov dword [esp + 0x14c], 0
call fcn.00422080
add esp, 4
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0xdc]
mov byte [esp + 0x154], 1
call fcn.00402ea0
lea ecx, [esp + 0x48]
mov byte [esp + 0x148], 0
call fcn.00402940
fld qword [esi + 0x118]
mov ecx, dword [esi + 0x1c]
fstp qword [esp + 0x11c]
fld qword [esi + 0x128]
mov dword [esp + 0x118], 1
fstp qword [esp + 0x124]
lea eax, [esp + 0xcc]
fld qword [esp + 0x14]
push eax
fstp qword [esp + 0x130]
mov edx, dword [ecx]
mov edx, dword [edx]
call edx
lea ecx, [esp + 0x64]
call fcn.00472620
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x14c], 2
call fcn.00422080
add esp, 4
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x154], 3
call fcn.00402ea0
lea ecx, [esp + 0x48]
mov byte [esp + 0x148], 2
call fcn.00402940
fld qword [esi + 0x120]
mov ecx, dword [esi + 0x1c]
fstp qword [esp + 0xb4]
fld qword [esi + 0x128]
mov dword [esp + 0xb0], 2
fstp qword [esp + 0xbc]
lea eax, [esp + 0x64]
fld qword [esp + 0x14]
push eax
fstp qword [esp + 0xc8]
mov edx, dword [ecx]
mov edx, dword [edx]
call edx
fldz
fst qword [esi + 0x118]
lea ecx, [esp + 0x64]
fstp qword [esi + 0x120]
fld qword [esp + 0x14]
fstp qword [esi + 0x128]
call fcn.004233f0
lea ecx, [esp + 0xcc]
mov dword [esp + 0x148], 0xffffffff
call fcn.004233f0
cmp ebx, 1
jne 0x473907
lea edi, [esi + 0x14c]
jmp 0x473916
cmp ebx, 2
jne 0x473afe
lea edi, [esi + 0x158]
test edi, edi
je 0x473afe
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x28]
push ecx
mov ecx, edi
call fcn.0046f0e0
mov edx, dword [edi + 4]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], edi
call fcn.0046b970
test al, al
je 0x4739ab
mov ecx, dword [ebp + 0x24]
mov edx, dword [ebp + 0x10]
push ecx
push edx
lea ecx, [esp + 0x50]
call fcn.004722d0
push eax
mov eax, dword [esp + 0x14]
push eax
mov ecx, edi
mov dword [esp + 0x150], 4
call fcn.004731c0
mov ecx, eax
call fcn.004720b0
lea ecx, [esp + 0x48]
mov dword [esp + 0x148], 0xffffffff
call fcn.00472070
mov ecx, dword [ebp + 0x24]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
push ecx
push edx
push eax
push ebx
mov ecx, esi
call fcn.00472100
jmp 0x473afe
lea ecx, [esp + 0x24]
call fcn.0046de10
mov edi, eax
add edi, 8
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], edi
call fcn.00471d30
mov edx, dword [ebp + 0x24]
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x2c]
push ecx
mov ecx, dword [ebp + 0x10]
push edx
push eax
push ecx
mov ecx, edi
mov dword [esp + 0x158], 5
call fcn.00472320
test eax, eax
jne 0x473a09
mov edx, dword [ebp + 0x24]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
push edx
push eax
push ecx
push ebx
mov ecx, esi
call fcn.00472100
jmp 0x473ac8
cmp eax, 3
jne 0x473ac8
mov edx, dword [ebp + 0x24]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
push edx
push eax
push ecx
push ebx
mov ecx, esi
call fcn.00472100
mov edx, dword [esp + 0x30]
mov eax, dword [edx]
lea ecx, [esp + 0x2c]
mov dword [esp + 0x20], eax
mov eax, ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x24]
mov dword [esp + 0x28], ecx
push edx
lea ecx, [esp + 0x20]
call fcn.0046ce60
test al, al
je 0x473ac0
lea ecx, [esp + 0x1c]
add edi, 8
call fcn.0046ce30
push eax
lea eax, [esp + 0x44]
push eax
mov ecx, edi
call fcn.0046f070
mov ecx, dword [edi + 4]
lea edx, [esp + 0x38]
mov dword [esp + 0x3c], ecx
push edx
lea ecx, [esp + 0x44]
mov dword [esp + 0x3c], edi
call fcn.0046b9a0
test al, al
jne 0x473ab1
lea ecx, [esp + 0x40]
call fcn.0046ea40
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
add eax, 4
mov eax, dword [esp + 0x10]
push ecx
push edx
push eax
push ebx
mov ecx, esi
call fcn.00472100
lea ecx, [esp + 0x1c]
call fcn.0046d0e0
mov edi, dword [esp + 0x14]
jmp 0x473a40
lea ecx, [edi + 8]
call fcn.0046f9c0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x148], 0xffffffff
call fcn.00471820
jmp 0x473afe
push edi
lea ecx, [esi + 0x14c]
call fcn.004734b0
push edi
lea ecx, [esi + 0x158]
call fcn.004734b0
push edi
mov ecx, esi
call fcn.004718e0
mov ecx, dword [esp + 0x140]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x128]
xor ecx, esp
call fcn.0049fcf1
mov esp, ebp
pop ebp
ret 0x20