Function at 0x467d70
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d3ef8
mov eax, dword fs:[0]
push eax
sub esp, 0xc
mov eax, dword [0x52600c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [0x565e28], 1
mov ebx, dword [sym.imp.WINMM.dll_timeGetTime]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jne 0x467db6
call esi
jmp 0x467db8
call ebx
cmp dword [0x565e28], 1
mov dword [ebp - 0x18], eax
jne 0x467dc8
call esi
jmp 0x467dca
call ebx
push 0
push dword [edi + 0x98]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x468257
cmp dword [edi + 0xac], 0
jne 0x468257
push 0xffffffffffffffff
push dword [edi + 0xa0]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x565e28], 1
jne 0x467e0b
call esi
jmp 0x467e0d
call ebx
mov ecx, eax
mov eax, dword [ebp - 0x18]
add eax, 0x17
cmp eax, ecx
ja 0x468190
cmp dword [0x565e28], 1
jne 0x467e2a
call esi
jmp 0x467e2c
call ebx
mov ecx, eax
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x513f70]
mov eax, dword [edi + 0xcc]
cvtpd2ps xmm0, xmm0
divss xmm0, dword [0x513c68]
movss dword [edi + 0xbc], xmm0
cmp eax, 5
jne 0x467eae
mov eax, dword [edi + 0xc8]
cmp eax, 0xff
jl 0x467ea3
mov dword [edi + 0xc8], 0xff
cmp dword [0x565e28], 1
jne 0x467e8b
call esi
jmp 0x467e8d
call ebx
mov dword [edi + 0x90], eax
mov eax, dword [edi + 0xc8]
mov dword [edi + 0xcc], 0
add eax, 8
mov dword [edi + 0xc8], eax
jmp 0x467f16
test eax, eax
jne 0x467ebb
mov ecx, edi
call fcn.00468290
jmp 0x467f16
cmp eax, 2
jne 0x467ee6
cmp dword [0x565e28], 1
jne 0x467ecd
call esi
jmp 0x467ecf
call ebx
mov ecx, eax
mov eax, dword [edi + 0x8c]
add eax, 0x17318
cmp eax, ecx
jb 0x468257
jmp 0x467f16
cmp eax, 3
jne 0x467f16
cmp dword [0x565e28], 1
jne 0x467ef8
call esi
jmp 0x467efa
call ebx
mov ecx, eax
mov eax, dword [edi + 0xd4]
add eax, dword [edi + 0xd0]
cmp eax, ecx
jae 0x467f16
mov dword [edi + 0xcc], 4
mov eax, dword [edi + 0xe0]
test eax, eax
jne 0x467f75
mov edx, dword [edi + 0xc4]
cmp edx, 0xff
jl 0x467f5d
mov dword [edi + 0xc4], 0xff
cmp dword [0x565e28], 1
jne 0x467f45
call esi
jmp 0x467f47
call ebx
mov edx, dword [edi + 0xc4]
mov dword [edi + 0x90], eax
mov dword [edi + 0xe0], 1
mov ecx, dword [edi + 0x84]
push edx
mov eax, dword [ecx]
call dword [eax + 0x50]
add dword [edi + 0xc4], 2
jmp 0x46811a
cmp eax, 1
jne 0x467fb7
cmp dword [0x565e28], eax
jne 0x467f86
call esi
jmp 0x467f88
call ebx
mov ecx, eax
mov eax, dword [edi + 0x90]
add eax, 0x1b58
cmp eax, ecx
jae 0x46811a
xor eax, eax
cmp dword [edi + 0xe4], 4
sete al
add eax, 2
mov dword [edi + 0xe0], eax
jmp 0x46811a
cmp eax, 2
jne 0x46800d
mov edx, dword [edi + 0xc4]
test edx, edx
jg 0x467ff5
mov dword [edi + 0xc4], 0
cmp dword [0x565e28], 1
jne 0x467fdd
call esi
jmp 0x467fdf
call ebx
mov edx, dword [edi + 0xc4]
mov dword [edi + 0x90], eax
mov dword [edi + 0xe0], 4
mov ecx, dword [edi + 0x84]
push edx
mov eax, dword [ecx]
call dword [eax + 0x50]
add dword [edi + 0xc4], 0xfffffffe
jmp 0x46811a
cmp eax, 3
jne 0x468059
mov eax, dword [edi + 0xc4]
test eax, eax
jg 0x46804b
mov dword [edi + 0xc4], 0
cmp dword [0x565e28], 1
jne 0x468033
call esi
jmp 0x468035
call ebx
mov dword [edi + 0x90], eax
mov eax, dword [edi + 0xc4]
mov dword [edi + 0xe0], 4
add eax, 0xfffffffe
mov dword [edi + 0xc4], eax
jmp 0x46811a
cmp eax, 4
jne 0x46811a
cmp dword [0x565e28], 1
jne 0x46806f
call esi
jmp 0x468071
call ebx
mov ecx, eax
mov eax, dword [edi + 0x90]
add eax, 0x1770
cmp eax, ecx
jae case.default.0x46809a
mov ecx, dword [edi + 0xe4]
lea eax, [ecx + 1]
mov dword [edi + 0xe4], eax
cmp ecx, 4
ja case.default.0x46809a
jmp dword [ecx*4 + 0x46827c]
push 2
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0xe0]
test eax, eax
je 0x4680b9
lea edx, [eax + 0x108]
jmp 0x4680bb
xor edx, edx
mov ecx, dword [edi + 0x84]
push 1
push 0
push 0
mov eax, dword [ecx + 0x108]
add ecx, 0x108
push edx
push 0x2d0
push 0x500
push 0
push 0
call dword [eax + 0x48]
mov dword [edi + 0xe0], 0
jmp case.default.0x46809a
push 3
jmp 0x4680a3
push 4
jmp 0x4680a3
push 5
jmp 0x4680a3
mov dword [edi + 0xe0], 4
cmp dword [edi + 0xe4], 6
jne 0x46811a
mov dword [edi + 0xe0], 4
cmp dword [edi + 0xcc], 4
jne 0x468130
cmp dword [edi + 0xe0], 4
je 0x4681ba
call fcn.00475d70
cmp dword [eax + 0x68], 0
je 0x468190
mov eax, dword [vtable.CCriticalSection.0]
mov ecx, 0x565b7c
mov dword [ebp - 0x14], 0x565b7c
call dword [eax + 4]
mov dword [ebp - 4], 1
call fcn.00475d70
mov esi, eax
mov ecx, esi
call fcn.00477790
test eax, eax
jne 0x46816f
mov ecx, esi
call fcn.00477860
mov dword [ebp - 4], 2
mov ecx, 0x565b7c
mov eax, dword [vtable.CCriticalSection.0]
call dword [eax + 8]
mov dword [ebp - 4], 0xffffffff
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
push dword [edi + 0xa0]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0
push dword [edi + 0x98]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x467de3
jmp 0x468257
mov eax, dword [edi]
mov ecx, edi
push 5
call dword [eax + 0xe0]
test eax, eax
je 0x4681d2
lea edx, [eax + 0x108]
jmp 0x4681d4
xor edx, edx
mov ecx, dword [edi + 0xb0]
push 0
push 0
push edx
mov eax, dword [ecx + 0x108]
add ecx, 0x108
push 0x2d0
push 0x500
push 0
push 0
call dword [eax + 0x4c]
mov edx, dword [edi + 0x78]
mov eax, dword [edi + 0xe8]
mov ecx, dword [edi + 0xb0]
sub eax, 0x2d0
push eax
lea eax, [edx + 0x108]
add ecx, 0x108
neg edx
push 0
sbb edx, edx
mov esi, dword [ecx]
and edx, eax
push edx
push 0x2d0
push 0x23f
push 0
push dword [edi + 0xdc]
call dword [esi + 0x4c]
mov ecx, dword [edi + 0x84]
push 0
mov eax, dword [ecx]
call dword [eax + 0x3c]
mov ecx, dword [edi + 0x80]
push 0
mov eax, dword [ecx]
call dword [eax + 0x3c]
mov dword [edi + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bcfcc
mov esp, ebp
pop ebp
ret