Function at 0x47536c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x475850
push dword fs:[eax]
mov dword fs:[eax], esp
or edx, 0xffffffff
mov eax, dword [0x63d8e4]
call fcn.00474ba4
mov eax, esi
sub eax, 1
jb 0x4753b6
je 0x475426
dec eax
je 0x475493
dec eax
je 0x4754fd
jmp 0x475568
push 2
mov edx, 0x475860
xor ecx, ecx
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 1
mov edx, 0x475864
mov ecx, 0x25
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x47586c
mov ecx, 0xc8
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x475878
mov ecx, 0x50
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x475880
mov ecx, 0xcb
mov eax, dword [0x63d8e4]
call fcn.00474b24
jmp 0x475568
push 2
mov edx, 0x475860
xor ecx, ecx
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 1
mov edx, 0x475864
mov ecx, 0x25
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x47586c
mov ecx, 0xc8
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x475888
mov ecx, 0x11b
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x475860
xor ecx, ecx
mov eax, dword [0x63d8e4]
call fcn.00474b24
jmp 0x475568
push 2
mov edx, 0x475860
xor ecx, ecx
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 1
mov edx, 0x475864
mov ecx, 0x25
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x47586c
mov ecx, 0xc8
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x475890
mov ecx, 0x11b
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x475860
xor ecx, ecx
mov eax, dword [0x63d8e4]
call fcn.00474b24
jmp 0x475568
push 2
mov edx, 0x475860
xor ecx, ecx
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 1
mov edx, 0x475864
mov ecx, 0x25
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x475898
mov ecx, 0xc8
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x4758a4
mov ecx, 0xc8
mov eax, dword [0x63d8e4]
call fcn.00474b24
push 2
mov edx, 0x4758b0
mov ecx, 0x53
mov eax, dword [0x63d8e4]
call fcn.00474b24
mov eax, dword [esi*4 + 0x63d8d0]
cmp dword [eax + 0x20], 0
jle 0x4756f4
xor edx, edx
call fcn.0042414c
mov ebx, eax
cmp word [ebx + 2], 0x2418
jne 0x47565d
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 4], eax
mov eax, dword [esi*4 + 0x63d8d0]
push dword [eax + 4]
mov eax, dword [ebp - 4]
pop edx
sub eax, edx
mov ecx, 0x3e8
xor edx, edx
div ecx
cmp eax, 0x3c
ja 0x47565d
push 0x4758c0
mov eax, dword [esi*4 + 0x63d8d0]
push dword [eax + 4]
mov eax, dword [ebp - 4]
pop edx
sub eax, edx
mov ecx, 0x3e8
xor edx, edx
div ecx
push eax
mov eax, 0x3c
pop edx
sub eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x10]
call fcn.004225b8
push dword [ebp - 0x10]
push 0x4758d0
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040575c
mov eax, dword [ebp - 0xc]
call fcn.00405858
push eax
mov eax, dword [0x63d8e8]
push eax
call sub.user32.dll_SetWindowTextA
cmp word [ebx + 4], 0xffff
jne 0x475635
push 0x10
push 0x4758f0
push 0x4758f8
mov eax, dword [0x63d8e0]
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x47564c
push 0x10
push 0x4758f0
push 0x475908
mov eax, dword [0x63d8e0]
push eax
call sub.user32.dll_MessageBoxA_1
mov eax, dword [esi*4 + 0x63d8d0]
call fcn.00474b70
jmp 0x475835
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [esi*4 + 0x63d8d0]
sub eax, dword [edx + 4]
mov ecx, 0x3e8
xor edx, edx
div ecx
cmp eax, 0x1e
jae 0x4756f4
or eax, 0xffffffff
call fcn.00474fac
cmp word [ebx + 4], 0xfffe
jne 0x4756b2
push 0x10
push 0x4758f0
push 0x475920
mov eax, dword [0x63d8e0]
push eax
call sub.user32.dll_MessageBoxA_1
mov eax, dword [esi*4 + 0x63d8d0]
call fcn.00474b70
jmp 0x475835
mov eax, dword [esi*4 + 0x63d8d0]
mov ebx, dword [eax + 0x20]
dec ebx
test ebx, ebx
jl 0x4756e3
inc ebx
xor edi, edi
mov eax, dword [esi*4 + 0x63d8d0]
mov edx, edi
call fcn.0042414c
cmp esi, 3
sete cl
xor edx, edx
call fcn.00474c5c
inc edi
dec ebx
jne 0x4756c4
mov eax, dword [esi*4 + 0x63d8d0]
call fcn.00474b70
jmp 0x475835
mov eax, dword [0x635008]
cmp byte [eax], 0
jne 0x475727
push 0
push 0
push 0x147
mov eax, dword [0x63d8ec]
push eax
call sub.user32.dll_SendMessageA
mov ebx, eax
mov eax, dword [0x634998]
add eax, 0x91
mov edx, ebx
call fcn.0042414c
mov edi, eax
mov eax, dword [0x635008]
cmp byte [eax], 0
jne 0x4757bb
mov eax, dword [edi + 0x10]
call fcn.00405858
mov ebx, eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 8], eax
push ebx
mov eax, dword [0x63506c]
mov eax, dword [eax + 8]
push eax
call sub.kernel32.dll_lstrcmpA
test eax, eax
jne 0x475779
mov eax, dword [0x63506c]
movzx eax, word [eax + 4]
cmp eax, dword [ebp - 8]
jne 0x475779
call fcn.00471470
test al, al
je 0x475779
mov eax, dword [0x63506c]
mov dword [eax + 0x14], edi
jmp 0x4757bb
lea edx, [ebp - 0x14]
mov eax, dword [edi + 0xc]
call fcn.00471ad0
mov edx, dword [ebp - 0x14]
lea eax, [edi + 0x10]
call fcn.0040541c
mov eax, dword [edi + 0x10]
call fcn.00405858
mov ebx, eax
call fcn.00471674
mov eax, dword [0x63506c]
mov dword [eax + 0x14], edi
mov eax, dword [0x63506c]
mov dword [eax + 8], ebx
mov eax, dword [0x63506c]
movzx edx, word [ebp - 8]
mov word [eax + 4], dx
mov byte [0x48fc14], 1
mov eax, dword [esi*4 + 0x63d8d0]
call fcn.00474b70
push 0x42
call fcn.004070d8
pop ecx
mov ebx, eax
push 0x42
push ebx
call fcn.004231a8
mov word [ebx], 0x42
mov eax, esi
add ax, 0x2419
mov word [ebx + 2], ax
mov eax, dword [0x63506c]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
call fcn.00405858
mov edx, eax
lea eax, [ebx + 0x32]
call fcn.00422404
mov eax, dword [0x63506c]
mov eax, dword [eax + 0x14]
mov dword [ebx + 0x2e], eax
mov ecx, 0x42
mov edx, ebx
mov eax, esi
call fcn.00475078
mov esi, 0x47593c
lea edi, [ebx + 0x32]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
call fcn.004070e8
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x475857
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.004053ec
ret