Function at 0x47e180
Capabilities:
Check for time delay via gettickcount
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x468
cmp dword [esp + 0x474], 0
push ebx
push ebp
push esi
push edi
ja 0x47e19f
mov dword [esp + 0x484], 0x6400000
mov eax, dword [esp + 0x48c]
test eax, eax
je 0x47e1b0
mov dword [eax], 1
push 0x4f0e28
call fcn.0049fc00
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
mov dword [esp + 0x2c], edi
test edi, edi
je 0x47e2fa
mov eax, dword [esp + 0x47c]
test eax, eax
je 0x47e2fa
cmp word [eax], 0
je 0x47e2fa
push 0x4f0e48
call fcn.0049fce0
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 4
push eax
push edi
call esi
mov ebp, eax
push 0x4f0e60
mov dword [esp + 0x20], ebp
call fcn.0049fce0
add esp, 4
push eax
push edi
call esi
mov ebx, eax
push str.e_7__7
mov dword [esp + 0x1c], ebx
call fcn.0049fce0
add esp, 4
push eax
push edi
call esi
push 0x4f0e98
mov dword [esp + 0x28], eax
call fcn.0049fce0
add esp, 4
push eax
push edi
call esi
push str.e_7__7R736
mov dword [esp + 0x18], eax
call fcn.0049fce0
add esp, 4
push eax
push edi
call esi
mov dword [esp + 0x28], eax
test ebp, ebp
je 0x47e2f3
test ebx, ebx
je 0x47e2f3
cmp dword [esp + 0x24], 0
je 0x47e2f3
cmp dword [esp + 0x14], 0
je 0x47e2f3
test eax, eax
je 0x47e2f3
mov eax, dword [esp + 0x47c]
mov esi, 0x84000000
call fcn.00409e40
mov ebp, eax
cmp word [ebp], 0x2a
jne 0x47e2bd
add ebp, 2
mov esi, ebp
call fcn.0041bbf0
mov esi, eax
mov ebx, 0x4e6dc4
mov eax, ebp
call fcn.00409df0
test eax, eax
je 0x47e2bd
call fcn.00409e40
mov ebp, eax
mov eax, dword [0x5193b0]
push 0
push 0
push 0
push 4
push eax
call dword [esp + 0x30]
mov ebx, eax
mov dword [esp + 0x58], ebx
test ebx, ebx
je 0x47e2f3
push 0
push esi
push 0
push 0
push ebp
push ebx
call dword [esp + 0x30]
mov dword [esp + 0x18], eax
test eax, eax
jne 0x47e307
push ebx
call dword [esp + 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x468
ret
mov esi, dword [esp + 0x480]
xor eax, eax
lea ecx, [esp + 0x78]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov edi, 0x100000
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x30], 0x28
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], 0x400
xor ebx, ebx
call fcn.00415010
mov edx, esi
mov edi, dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x1c], eax
movzx eax, word [ebp]
cmp eax, 0x68
je 0x47e49a
cmp eax, 0x48
je 0x47e49a
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
push 0x400
lea ecx, [esp + 0x80]
push ecx
push edx
call dword [esp + 0x38]
test eax, eax
je 0x47e5ce
mov esi, 0x100000
cmp dword [esp + 0x14], 0
je 0x47e5ce
mov ebp, dword [esp + 0x488]
test ebp, ebp
je 0x47e3cd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1c]
cmp eax, ebp
ja 0x47e5a9
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebp
sub eax, dword [0x5179a4]
mov ecx, dword [0x51161c]
cmp eax, dword [ecx + 0xd8]
jbe 0x47e413
push 0
push 0
push 0
push 0
lea edx, [esp + 0x6c]
push edx
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x47e40c
push 1
push 0xffffffffffffffff
call fcn.00401930
add esp, 8
call ebp
mov dword [0x5179a4], eax
mov ecx, dword [esp + 0x484]
mov eax, dword [esp + 0x48]
lea eax, [ebx + eax + 3]
test ecx, ecx
je 0x47e42e
cmp ecx, eax
jbe 0x47e5be
cmp esi, eax
ja 0x47e458
add esi, 0x100000
mov eax, esi
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x480]
call fcn.00415170
mov edi, eax
test edi, edi
je 0x47e5c5
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x7c]
push edx
lea eax, [edi + ebx]
push eax
call fcn.004cd6c0
mov eax, dword [esp + 0x24]
add ebx, dword [esp + 0x20]
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
push 0x400
lea edx, [esp + 0x80]
push edx
push eax
call dword [esp + 0x38]
test eax, eax
jne 0x47e3a5
jmp 0x47e5ce
mov edx, dword [esp + 0x18]
push 0
push 8
lea ecx, [esp + 0x38]
push ecx
push edx
call dword [esp + 0x24]
test eax, eax
je 0x47e5ce
mov esi, 0x100000
lea esp, [esp]
cmp dword [esp + 0x48], 0
je 0x47e5ce
mov ebp, dword [esp + 0x488]
test ebp, ebp
je 0x47e4e8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1c]
cmp eax, ebp
ja 0x47e5a9
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebp
sub eax, dword [0x5179a4]
mov ecx, dword [0x51161c]
cmp eax, dword [ecx + 0xd8]
jbe 0x47e52e
push 0
push 0
push 0
push 0
lea edx, [esp + 0x6c]
push edx
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x47e527
push 1
push 0xffffffffffffffff
call fcn.00401930
add esp, 8
call ebp
mov dword [0x5179a4], eax
mov ecx, dword [esp + 0x484]
mov eax, dword [esp + 0x48]
lea eax, [ebx + eax + 3]
test ecx, ecx
je 0x47e545
cmp ecx, eax
jbe 0x47e5be
cmp esi, eax
ja 0x47e56b
add esi, 0x100000
mov eax, esi
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x480]
call fcn.00415170
mov edi, eax
test edi, edi
je 0x47e5c5
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x48]
push ecx
lea edx, [esp + 0x7c]
push edx
lea eax, [edi + ebx]
push eax
call fcn.004cd6c0
mov edx, dword [esp + 0x24]
add ebx, dword [esp + 0x54]
add esp, 0xc
push 0
push 8
lea ecx, [esp + 0x38]
push ecx
push edx
mov dword [esp + 0x58], 0x400
call dword [esp + 0x24]
test eax, eax
jne 0x47e4c0
jmp 0x47e5ce
mov eax, dword [esp + 0x48c]
test eax, eax
je 0x47e5ba
mov dword [eax], 2
xor ebx, ebx
jmp 0x47e5ce
mov esi, dword [esp + 0x480]
push 1
xor ebx, ebx
call fcn.00414fa0
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x24]
push eax
mov word [edi + ebx], 0
mov byte [edi + ebx + 2], 0
call esi
mov ecx, dword [esp + 0x58]
push ecx
call esi
mov edx, dword [esp + 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [esp + 0x48c]
test eax, eax
je 0x47e60c
cmp dword [eax], 2
jae 0x47e60c
mov dword [eax], 0
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
add esp, 0x468
ret