Function at 0x436350
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x144
mov eax, dword [0x6c6060]
xor eax, esp
mov dword [esp + 0x140], eax
push ebx
push esi
mov esi, ecx
cmp dword [esi + 0xe], 0
push edi
je 0x436849
call fcn.0042e480
fldz
mov ecx, dword [esi + 0x1b6]
imul ecx, dword [esi + 0x1ba]
mov eax, 0x51eb851f
mul ecx
shr edx, 5
shl edx, 0x18
or edx, dword [esi + 0x1b2]
lea edi, [esi + 0x1be]
push edx
push edi
push ecx
lea ecx, [esi + 0x240]
fstp dword [esp]
push 0
push 0
call fcn.00433550
fld dword [edi]
xor edi, edi
fstp dword [0x6d5534]
movzx edx, word [esi + 0x260]
mov dword [esp + 0x14], edx
fild dword [esp + 0x14]
fadd dword [esi + 0x1c2]
fstp dword [0x6d5538]
cmp byte [esi + 0x2a6], 0
jbe 0x436452
lea esp, [esp]
mov ecx, dword [esi + 0x1b6]
fldz
imul ecx, dword [esi + 0x1ba]
mov eax, 0x51eb851f
mul ecx
shr edx, 5
shl edx, 0x18
or edx, dword [esi + 0x1b2]
push edx
push 0x6d5534
push ecx
fstp dword [esp]
push 0
push 0
lea ecx, [esi + 0x262]
call fcn.00433550
movzx edx, word [esi + 0x282]
mov dword [esp + 0x14], edx
inc edi
fild dword [esp + 0x14]
fadd dword [0x6d5538]
fstp dword [0x6d5538]
movzx eax, byte [esi + 0x2a6]
cmp edi, eax
jl 0x4363f0
mov ecx, dword [esi + 0x1b6]
fldz
imul ecx, dword [esi + 0x1ba]
mov eax, 0x51eb851f
mul ecx
shr edx, 5
shl edx, 0x18
or edx, dword [esi + 0x1b2]
xor ebx, ebx
push edx
push 0x6d5534
push ecx
lea ecx, [esi + 0x284]
fstp dword [esp]
push ebx
push ebx
call fcn.00433550
or edi, 0xffffffff
cmp dword [esi + 0x2ce], edi
je 0x43650f
fld dword [esi + 0x1be]
mov eax, 0x51eb851f
fadd qword [0x5a93b0]
fstp dword [0x6d5534]
fild dword [esi + 0x234]
fimul dword [esi + 0x2ce]
fild dword [esi + 0x2ae]
fadd dword [esi + 0x1c2]
faddp st(1)
fsub dword [esi + 0x2fe]
fstp dword [0x6d5538]
mov edx, dword [esi + 0x1b6]
imul edx, dword [esi + 0x1ba]
fldz
mul edx
shr edx, 5
shl edx, 0x18
or edx, dword [esi + 0x1b2]
lea eax, [esi + 0x2f6]
push edx
push 0x6d5534
push ecx
lea ecx, [esi + 0x2d6]
fstp dword [esp]
push ebx
push eax
call fcn.00433550
mov edx, dword [esi + 0x23c]
lea ecx, [esi + 0x218]
push edx
call fcn.00585790
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0x18], ebx
cmp eax, ebx
je 0x436842
lea eax, [esp + 0x20]
push eax
lea ecx, [esi + 0x218]
call fcn.00585910
mov ecx, dword [esi + 0x238]
mov ebx, dword [eax]
mov edx, 1
sub ecx, edx
mov dword [esp + 0x24], ebx
cmp dword [esp + 0x10], ecx
jge 0x436842
movzx edi, word [esi + 0x1a]
mov eax, edi
cmp eax, 0xc
ja 0x436837
xor ecx, ecx
cmp dword [eax*4 + 0x6d51cc], ecx
je 0x436837
mov eax, dword [ebx + 0x104]
cmp eax, 0xffffffff
je 0x4365ea
cmp eax, dword [esp + 0x1c]
jne 0x4365b0
mov ecx, dword [esp + 0x14]
add dword [esp + 0x18], ecx
lea eax, [ebx + 4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4365a7
jmp 0x4365d7
cmp eax, 0xffffffff
je 0x4365ea
cmp eax, dword [esp + 0x1c]
je 0x4365ea
add dword [esp + 0x10], edx
mov dword [esp + 0x1c], eax
lea eax, [ebx + 4]
mov dword [esp + 0x18], ecx
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4365d0
movzx ecx, word [edi*4 + 0x6d51fc]
sub eax, edx
imul ecx, eax
mov dword [esp + 0x14], ecx
jmp 0x4365f2
add dword [esp + 0x10], edx
mov dword [esp + 0x18], ecx
fld dword [esi + 0x1be]
call fcn.0058af70
fld dword [esi + 0x1c2]
add eax, dword [esi + 0x2aa]
mov edi, dword [esi + 0x234]
add eax, dword [esp + 0x18]
imul edi, dword [esp + 0x10]
mov dword [esp + 0x38], eax
call fcn.0058af70
add edi, eax
add edi, dword [esi + 0x2ae]
push 0x100
mov eax, 1
lea edx, [esp + 0x4c]
push 0
push edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
call fcn.0058a530
add esp, 0xc
lea edi, [ebx + 4]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [esp + 0x4c]
push edi
push eax
call fcn.0058b1f0
add esp, 0xc
cmp dword [esi + 0x30a], 0
je 0x4366c9
mov ebx, dword [esi + 0x234]
fld dword [esi + 0x1c2]
imul ebx, dword [esp + 0x10]
lea ecx, [esp + 0x48]
push ecx
call fcn.0058af70
add ebx, eax
add ebx, dword [esi + 0x2ae]
fld dword [esi + 0x1be]
push ebx
call fcn.0058af70
add eax, dword [esi + 0x2aa]
mov ecx, esi
add eax, dword [esp + 0x20]
push eax
call fcn.00436070
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
call fcn.00436270
mov ebx, dword [esp + 0x24]
mov eax, dword [esi + 0x2d2]
sub eax, dword [esi + 0x23c]
cmp eax, dword [esp + 0x10]
jne 0x436713
cmp dword [esi + 0x306], 1
jne 0x436713
push 0xffffff00
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x50]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
movzx ecx, word [esi + 0x1a]
push eax
lea eax, [esp + 0x54]
push eax
push ecx
mov ecx, 0x6d51c8
call fcn.004307e0
jmp 0x436837
cmp dword [ebx + 0x108], 0
je 0x436777
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x312]
cmp eax, 0x118
jbe 0x436759
mov eax, dword [esi + 0x30e]
cmp eax, 1
jb 0x436746
mov dword [esi + 0x30e], 0
jmp 0x43674d
inc eax
mov dword [esi + 0x30e], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x312], eax
mov edx, dword [esi + 0x30e]
mov eax, dword [edx*4 + 0x6bfdec]
push eax
lea ecx, [esp + 0x3c]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push edi
jmp 0x4367aa
mov ecx, dword [esi + 0x1b6]
imul ecx, dword [esi + 0x1ba]
mov eax, 0x51eb851f
mul ecx
shr edx, 5
shl edx, 0x18
or edx, dword [ebx]
lea eax, [esp + 0x48]
push edx
lea edx, [esp + 0x3c]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [esp + 0x54]
push ecx
movzx edx, word [esi + 0x1a]
push edx
mov ecx, 0x6d51c8
call fcn.004307e0
cmp dword [ebx + 0x10c], 0
je 0x436837
cmp dword [esi + 0x31a], 0
je 0x436837
fld dword [0x5ab8d4]
lea ecx, [edi + 1]
fst dword [esp + 0x2c]
fstp dword [esp + 0x28]
lea esp, [esp]
mov al, byte [edi]
inc edi
test al, al
jne 0x4367e0
movzx eax, word [esi + 0x1a]
sub edi, ecx
movzx ecx, word [eax*4 + 0x6d51fc]
imul ecx, edi
add ecx, dword [esp + 0x38]
mov dword [esp + 0x24], ecx
fild dword [esp + 0x24]
jns 0x43680c
fadd dword [0x5a8f58]
fstp dword [esp + 0x30]
push 0xffffffffffffffff
fild dword [esp + 0x40]
lea edx, [esp + 0x34]
push edx
push ecx
fstp dword [esp + 0x40]
lea eax, [esp + 0x34]
fldz
lea ecx, [esi + 0x316]
fstp dword [esp]
push 0
push eax
call fcn.00433550
cmp dword [esp + 0x20], 0
jne 0x43653d
mov ecx, esi
call fcn.0042ea00
mov ecx, dword [esp + 0x14c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0058a6b9
mov esp, ebp
pop ebp
ret