Function at 0x46f0a0
Capabilities:
Check for time delay via gettickcount
Set current directory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x144
cmp dword [0x4d98d0], 0
mov eax, ecx
push ebx
push esi
push edi
mov dword [esp + 0x1c], eax
je 0x46f374
cmp dword [0x4dc2ec], 0
jne 0x46f374
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 0x18]
lea ecx, [ecx + ecx*4]
mov esi, dword [eax + ecx*4 + 0xc]
lea edx, [eax + ecx*4]
mov dword [esp + 0x10], edx
test esi, esi
je 0x46f374
mov ecx, esi
call fcn.004774b0
sub eax, 0
je 0x46f0fc
sub eax, 1
jne 0x46f107
mov eax, dword [esi + 8]
test eax, eax
je 0x46f107
mov cl, byte [eax]
jmp 0x46f109
xor cl, cl
mov edx, dword [0x4dc40c]
mov eax, dword [0x4d98d4]
mov byte [esp + 0xf], cl
cmp edx, eax
jl 0x46f135
add eax, 2
cmp edx, eax
jge 0x46f374
cmp cl, 0xe0
je 0x46f135
cmp cl, 0xdb
jne 0x46f374
mov eax, dword [0x4d98d8]
cmp dword [eax + 0x2c], 0
jg 0x46f374
mov ecx, dword [0x4dc408]
push 0
push 1
call fcn.004014c0
push 0x7f
push eax
lea eax, [esp + 0x58]
push eax
call fcn.004a1eb4
mov ebx, dword [0x4d98d8]
xor eax, eax
inc dword [0x4dc40c]
add ebx, 0x108
add esp, 0xc
mov word [esp + 0x14e], ax
mov ecx, 0x42
mov dword [0x4d98d8], ebx
mov esi, 0x4dc2f0
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
push eax
mov ecx, 0x4ddca0
mov dword [ebx + 0x2c], eax
call fcn.004174d0
cmp dword [0x4dc420], 0
xorps xmm0, xmm0
movlpd qword [0x4de788], xmm0
je 0x46f1d1
mov eax, dword [0x4db004]
mov ecx, 0x4b70dc
test eax, eax
je 0x46f1ca
mov eax, dword [eax]
test eax, eax
cmovne ecx, eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov al, byte [ebx + 0xee]
test al, al
jne 0x46f1ff
cmp byte [esp + 0xf], 0x65
sete al
mov byte [ebx + 0xee], al
jne 0x46f1ff
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0xffffffff
mov dword [ebx + 0x24], 0xffffffff
cmp dword [0x4de794], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
je 0x46f217
cmp dword [0x4de790], 0
jne 0x46f21b
test al, al
je 0x46f24e
mov byte [ebx + 0xec], 0
test al, al
jne 0x46f24e
cmp dword [0x4de794], 0
jge 0x46f23b
mov dword [ebx + 0xe0], 0xffffffff
jmp 0x46f24e
call edi
mov dword [ebx + 0xdc], eax
mov eax, dword [0x4de794]
mov dword [ebx + 0xe0], eax
mov ecx, dword [0x4dc408]
push 1
push 0
push 0xffffffffffffffff
push 0x4b716c
call fcn.0047faa0
mov eax, dword [0x4d98d8]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
add dword [ebx + 0x20], 2
mov dword [eax + 0x44], ebx
mov dword [eax + 0x48], ebx
mov dword [eax + 0x50], ecx
mov dword [eax + 0x34], 0x4e
mov dword [eax + 0x38], esi
call edi
mov edi, dword [esp + 0x10]
mov dword [0x4de79c], eax
mov dword [0x4de798], eax
push 0
mov eax, dword [edi]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push eax
push 3
lea eax, [esp + 0x2c]
mov dword [esp + 0x34], 1
mov dword [esp + 0x30], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x3c], 0x4d3760
mov dword [esp + 0x54], 1
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], 0
mov ecx, dword [edi + 0xc]
mov edx, ecx
push eax
push 0x4b7154
call fcn.00473ca0
mov ecx, dword [edi + 0xc]
add esp, 0x14
call fcn.004774b0
test eax, eax
jne 0x46f331
cmp dword [edi + 0xc], eax
je 0x46f331
mov ecx, dword [0x4dc408]
cmp byte [ecx + 0x17], al
jne 0x46f313
mov ecx, dword [ecx + 0xc]
test byte [ecx + 0x15], 0x10
je 0x46f31d
mov esi, dword [ecx]
jmp 0x46f335
push 0
push 1
call fcn.004014c0
mov ecx, eax
call fcn.004151f0
mov esi, eax
jmp 0x46f335
mov esi, dword [esp + 0x10]
add dword [ebx + 0x20], 0xffffffff
jne 0x46f353
push dword [ebx]
call fcn.0049b8d4
add esp, 4
push 0xc4
push ebx
call fcn.00495a61
add esp, 8
mov ecx, dword [0x4d98d8]
mov dword [ecx + 0x44], 0
lea ecx, [esp + 0x50]
call fcn.00404810
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 8