Function at 0x4646c8
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 3
add esp, 0xfffff004
push eax
dec eax
jne 0x4646d1
mov eax, dword [ebp - 4]
add esp, 0xfffff228
push ebx
push esi
push edi
mov dword [ebp - 0x40], edx
mov ebx, eax
mov eax, 0x4a80d8
call fcn.00495294
mov word [ebp - 0x2c], 8
inc dword [0x4c4ce8]
inc dword [ebp - 0x20]
mov word [ebp - 0x2c], 0x14
call fcn.0049d288
mov dword [ebp - 0x44], eax
push 1
push 0xffffffffffffffff
push 0x100c
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov dword [ebp - 0x48], eax
mov eax, 0x4c28c4
mov edx, 1
call fcn.00449498
mov eax, 0x1c4
call fcn.0041202c
mov edx, eax
mov eax, 0x4c28c4
call fcn.004494f8
push 0
push 0
push 0xb
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, ebx
call fcn.004685c8
push 0xffffffffffffffff
push dword [ebx + 8]
call sub.COMCTL32.DLL_ImageList_Remove
push dword [ebx + 8]
push 1
push 0x1003
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, 0x4c28b4
call fcn.0047f924
lea edx, [ebp - 0x11c]
mov eax, 0x4c309c
call fcn.004626b8
lea ecx, [ebp - 0xd1c]
lea edx, [ebp - 0x51c]
mov eax, 0x4c309c
call fcn.00462658
lea edx, [ebp - 0x51c]
mov eax, 0x4c287c
call fcn.004699e8
lea edx, [ebp - 0x51c]
push edx
call fcn.00494e94
pop ecx
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0xd1c]
call fcn.00410228
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x4c], 0
je 0x4647e1
inc dword [ebp - 0x4c]
cmp byte [0x4b0f6c], 0
je 0x4647fc
lea edx, [ebp - 0x51c]
mov eax, 0x4b0e6c
call fcn.004106a4
jmp 0x464809
lea edx, [ebp - 0x51c]
push edx
call fcn.00494e94
pop ecx
test eax, eax
je 0x46480e
inc eax
cmp dword [ebp - 0x50], 0
je 0x46481a
mov ecx, dword [ebp - 0x50]
inc ecx
jmp 0x46481c
mov ecx, eax
mov dword [ebp - 0x50], ecx
xor edi, edi
mov byte [ebp - 0x51], 0
mov byte [ebp - 0x52], 0
mov edx, 0x4a7d34
mov eax, 0x4a7d2b
mov ecx, 1
call fcn.0046c29c
test eax, eax
mov edx, 0x4a7d47
setne al
and eax, 1
xor ecx, ecx
mov byte [ebp - 0x53], al
mov eax, 0x4a7d2b
call fcn.0046c29c
test eax, eax
setne dl
and edx, 1
mov byte [ebp - 0x54], dl
mov word [ebp - 0x2c], 0x20
lea eax, [ebp - 0x18]
call fcn.004652a0
inc dword [ebp - 0x20]
mov word [ebp - 0x2c], 0x14
mov byte [ebp - 0x111c], 0
jmp 0x464ece
cmp byte [ebp - 0x51], 0
jne 0x4648ba
test edi, 0x1f
jne 0x4648ba
call fcn.0049d288
sub eax, dword [ebp - 0x44]
cmp eax, 0x1f4
jle 0x4648ba
mov byte [ebp - 0x51], 1
push 0x7f02
push 0
call sub.USER32.DLL_LoadCursorA
push eax
call sub.USER32.DLL_SetCursor
lea esi, [ebp - 0x1d4c]
add esi, dword [ebp - 0x4c]
mov word [ebp - 0x2c], 0x14
mov eax, dword [ebp - 0x50]
add eax, eax
lea edx, [ebp - 0x194c]
add eax, edx
mov dword [ebp - 0x58], eax
test byte [ebp - 0x113c], 0x10
setne cl
and ecx, 1
mov byte [ebp - 0x59], cl
cmp byte [ebp - 0x54], 0
je 0x46490a
lea eax, [ebp - 0x1d4c]
call fcn.0040ba60
mov esi, eax
lea eax, [ebp - 0x194c]
call fcn.0040baec
mov dword [ebp - 0x58], eax
cmp byte [ebp - 0x59], 0
je 0x4649f9
cmp byte [ebp - 0x54], 0
jne 0x4649f9
test byte [ebp - 0x112e], 1
je 0x464976
lea edx, [ebp - 0x111c]
push edx
push esi
call fcn.00494e18
add esp, 8
test eax, eax
je 0x464ece
push esi
lea ecx, [ebp - 0x111c]
push ecx
call fcn.00494e64
add esp, 8
lea ecx, [ebp - 0x194c]
lea edx, [ebp - 0x1d4c]
mov eax, 0x4c8fe4
push 0
push 1
call fcn.0046ba60
test al, al
jne 0x464ece
jmp 0x4649f9
lea eax, [ebp - 0x60]
push eax
push 1
lea ecx, [ebp - 0x194c]
lea edx, [ebp - 0x1d4c]
mov eax, 0x4c8fe4
call fcn.0046ba60
test al, al
je 0x4649f9
mov eax, 0x4c8fe4
mov edx, dword [ebp - 0x60]
call fcn.0046bb1c
mov ecx, dword [ebp - 0x1138]
mov dword [eax + 0x20], ecx
mov ecx, dword [ebp - 0x1134]
mov dword [eax + 0x24], ecx
lea ecx, [ebp - 0x1db0]
lea edx, [ebp - 0x1138]
mov eax, ebx
call fcn.0046514c
mov dword [ebp - 0x1dd0], 4
lea eax, [ebp - 0x1db0]
lea edx, [ebp - 0x1dd8]
mov dword [ebp - 0x1dc4], eax
push edx
push dword [ebp - 0x60]
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
jmp 0x464ece
mov dword [ebp - 0x1e00], 7
xor ecx, ecx
mov dword [ebp - 0x1dfc], edi
mov dword [ebp - 0x1df8], ecx
mov dword [ebp - 0x1de4], ecx
lea eax, [ebp - 0x64]
lea edx, [ebp - 0x1e64]
push eax
push edx
lea eax, [ebp - 0x68]
push 0x64
push eax
lea eax, [ebp - 0x18]
mov ecx, dword [ebp - 0x113c]
mov edx, esi
call fcn.0046539c
mov byte [ebp - 0x74], 0
test byte [ebp - 0x1130], 1
je 0x464a56
push 0x4a7d50
lea eax, [ebp - 0x74]
push eax
call fcn.00494d88
add esp, 8
mov eax, dword [ebp - 0x1130]
and eax, 6
test eax, eax
je 0x464ab4
sub eax, 2
je 0x464a74
sub eax, 2
je 0x464a87
sub eax, 2
je 0x464aa3
jmp 0x464ab4
push 0x4a7d53
lea edx, [ebp - 0x74]
push edx
call fcn.00494d88
add esp, 8
jmp 0x464ab4
cmp byte [ebp - 0x87], 0
jne 0x464ab4
push 0x4a7d58
lea ecx, [ebp - 0x74]
push ecx
call fcn.00494d88
add esp, 8
jmp 0x464ab4
push 0x4a7d5d
lea eax, [ebp - 0x74]
push eax
call fcn.00494d88
add esp, 8
cmp dword [ebp - 0x68], 0xffffffff
je 0x464ac5
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x1de4], edx
jmp 0x464aee
push dword [ebp - 0x64]
push 0xffffffffffffffff
push dword [ebx + 8]
call sub.COMCTL32.DLL_ImageList_ReplaceIcon
mov dword [ebp - 0x1de4], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x1de4]
call fcn.004654cc
push dword [ebp - 0x64]
call sub.USER32.DLL_DestroyIcon
lea ecx, [edi + 1]
mov dword [ebp - 0x1128], ecx
lea edx, [ebp - 0x1d4c]
mov eax, 0x4c8fe4
call fcn.0046b778
mov dword [ebp - 0x1de0], eax
lea edx, [ebp - 0x1d4c]
mov eax, ebx
call fcn.00464644
test al, al
je 0x464b30
mov word [ebp - 0x194c], 0
lea ecx, [ebp - 0x194c]
mov dword [ebp - 0x58], ecx
cmp byte [ebp - 0x53], 0
jne 0x464b4f
mov eax, esi
call fcn.00448b1c
cmp word [ebp - 0x194c], 0
je 0x464b4f
mov eax, dword [ebp - 0x58]
call fcn.00448b50
call fcn.0040ffc8
test eax, eax
je 0x464ba0
cmp word [ebp - 0x194c], 0
je 0x464ba0
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x1dec], edx
mov eax, dword [ebp - 0x58]
call fcn.00410228
mov edx, eax
lea eax, [ebp - 0x74]
add edx, edx
mov ecx, 0x10000000
add edx, dword [ebp - 0x58]
call fcn.00410040
lea edx, [ebp - 0x1e00]
push edx
push 0
push 0x104d
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov esi, eax
jmp 0x464c0f
cmp word [ebp - 0x194c], 0
je 0x464be5
lea edx, [ebp - 0x2264]
mov ecx, 0x10000000
mov eax, dword [ebp - 0x58]
call fcn.0041001c
push 0x4a7d62
lea eax, [ebp - 0x2264]
push eax
call fcn.00494f3d
add esp, 8
test eax, eax
jne 0x464be5
lea edx, [ebp - 0x2264]
push edx
push esi
call fcn.00494e64
add esp, 8
mov dword [ebp - 0x1dec], esi
lea ecx, [ebp - 0x74]
push ecx
push esi
call fcn.00494d88
add esp, 8
lea eax, [ebp - 0x1e00]
push eax
push 0
push 0x1007
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov esi, eax
cmp byte [ebp - 0x59], 0
jne 0x464d10
cmp dword [ebp - 0x1148], 0x80000000
jne 0x464c2c
cmp dword [ebp - 0x114c], 0
je 0x464c43
cmp dword [ebp - 0x1148], 0x7fffffff
jne 0x464c59
cmp dword [ebp - 0x114c], 0
jne 0x464c59
push 0x4a7d68
lea eax, [ebp - 0x2298]
push eax
call fcn.00494e64
add esp, 8
jmp 0x464c75
push dword [ebp - 0x1148]
push dword [ebp - 0x114c]
lea eax, [ebp - 0x2298]
mov edx, 0x32
call fcn.0044815c
mov dword [ebp - 0x22b8], 1
lea ecx, [ebp - 0x2298]
lea eax, [ebp - 0x22c0]
mov dword [ebp - 0x22ac], ecx
push eax
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
cmp dword [ebp - 0x1140], 0x80000000
jne 0x464cca
cmp dword [ebp - 0x1144], 0
jne 0x464cca
push 0x4a7d68
lea edx, [ebp - 0x2298]
push edx
call fcn.00494e64
add esp, 8
jmp 0x464ce6
push dword [ebp - 0x1140]
push dword [ebp - 0x1144]
lea eax, [ebp - 0x2298]
mov edx, 0x32
call fcn.0044815c
mov dword [ebp - 0x22e0], 2
lea ecx, [ebp - 0x2298]
lea eax, [ebp - 0x22e8]
mov dword [ebp - 0x22d4], ecx
push eax
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov dword [ebp - 0x2308], 3
lea edx, [ebp - 0x1e64]
lea ecx, [ebp - 0x2310]
mov dword [ebp - 0x22fc], edx
push ecx
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
cmp dword [ebp - 0x1138], 0
jne 0x464d62
cmp dword [ebp - 0x1134], 0
jne 0x464d62
push 0x4a7d68
lea eax, [ebp - 0x2374]
push eax
call fcn.00494e64
add esp, 8
jmp 0x464d75
lea ecx, [ebp - 0x2374]
lea edx, [ebp - 0x1138]
mov eax, ebx
call fcn.0046514c
mov dword [ebp - 0x2394], 4
lea edx, [ebp - 0x2374]
lea ecx, [ebp - 0x239c]
mov dword [ebp - 0x2388], edx
push ecx
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, dword [ebp - 0x1130]
test al, 8
je 0x464df9
cmp byte [ebp - 0x59], 0
jne 0x464df9
push dword [ebp - 0x112c]
test al, 0x10
je 0x464dc0
mov edx, 0x4a7d6a
jmp 0x464dc5
mov edx, 0x4a7d6f
push edx
lea eax, [ebp - 0x80]
push eax
call fcn.00497dc4
add esp, 0xc
mov dword [ebp - 0x23bc], 5
lea ecx, [ebp - 0x80]
lea eax, [ebp - 0x23c4]
mov dword [ebp - 0x23b0], ecx
push eax
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
cmp byte [ebp - 0x52], 0
jne 0x464e42
mov dword [ebp - 0x23e4], 4
test byte [ebp - 0x1130], 0x10
je 0x464e19
mov eax, 0x74
jmp 0x464e1e
mov eax, 0x73
call fcn.0041202c
mov dword [ebp - 0x23d8], eax
lea edx, [ebp - 0x23e4]
push edx
push 5
push 0x101a
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov byte [ebp - 0x52], 1
cmp byte [ebp - 0x54], 0
je 0x464ecd
lea edx, [ebp - 0x27e4]
lea eax, [ebp - 0x1d4c]
call fcn.0040bfac
lea edx, [ebp - 0x2fe4]
lea eax, [ebp - 0x194c]
call fcn.0040bfd4
mov dword [ebp - 0x3004], 6
call fcn.0040ffc8
test eax, eax
je 0x464ead
cmp word [ebp - 0x194c], 0
je 0x464ead
lea ecx, [ebp - 0x2fe4]
lea eax, [ebp - 0x300c]
mov dword [ebp - 0x2ff8], ecx
push eax
push esi
push 0x1074
push dword [ebx]
call sub.USER32.DLL_SendMessageA
jmp 0x464ecd
lea edx, [ebp - 0x27e4]
lea ecx, [ebp - 0x300c]
mov dword [ebp - 0x2ff8], edx
push ecx
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
inc edi
lea edx, [ebp - 0x1d4c]
mov eax, 0x4c309c
mov cl, byte [ebp - 0x54]
call fcn.00461bf4
test eax, eax
jne 0x464887
mov dword [ebp - 0x3034], 7
mov dword [ebp - 0x3030], edi
xor eax, eax
mov dword [ebp - 0x302c], eax
mov dword [ebp - 0x3018], eax
mov dword [ebp - 0x3020], 0x4a7d28
mov byte [ebp - 0x3134], 0
lea ecx, [ebp - 0x3134]
mov edx, 0x4a7d74
lea eax, [ebp - 0x18]
call fcn.00465640
mov esi, eax
mov word [ebp - 0x2c], 0x14
push esi
push 0xffffffffffffffff
push dword [ebx + 8]
call sub.COMCTL32.DLL_ImageList_ReplaceIcon
mov dword [ebp - 0x3018], eax
push esi
call sub.USER32.DLL_DestroyIcon
push 0xc30
push 0
lea eax, [ebp - 0x3d64]
push eax
call fcn.00494ce4
add esp, 0xc
push 0x4a7d28
lea edx, [ebp - 0x3d64]
push edx
call fcn.00494e64
mov dword [ebp - 0x3154], 0x10
add esp, 8
lea edx, [ebp - 0x3d64]
mov eax, 0x4c8fe4
call fcn.0046b778
mov dword [ebp - 0x3014], eax
lea ecx, [ebp - 0x3034]
push ecx
push 0
push 0x1007
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov dword [ebp - 0x3d84], 3
lea edx, [ebp - 0x3134]
lea ecx, [ebp - 0x3d8c]
mov dword [ebp - 0x3d78], edx
push ecx
push eax
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, 0x4c8fe4
call fcn.0046ba2c
mov eax, ebx
call fcn.00468240
cmp dword [ebp - 0x40], 0
je 0x465041
mov edx, dword [ebp - 0x40]
mov eax, ebx
call fcn.00464530
test eax, eax
jne 0x46506a
push 0
push 0
push 0x1004
push dword [ebx]
call sub.USER32.DLL_SendMessageA
test eax, eax
jle 0x465015
cmp eax, dword [ebp - 0x48]
jg 0x465015
dec eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3da4], 3
mov dword [ebp - 0x3da8], 3
lea edx, [ebp - 0x3db4]
push edx
push dword [ebp - 0x48]
push 0x102b
push dword [ebx]
call sub.USER32.DLL_SendMessageA
jmp 0x46506a
mov dword [ebp - 0x3dcc], 3
mov dword [ebp - 0x3dd0], 3
lea ecx, [ebp - 0x3ddc]
push ecx
push 0
push 0x102b
push dword [ebx]
call sub.USER32.DLL_SendMessageA
push 0
push 1
push 0xb
push dword [ebx]
call sub.USER32.DLL_SendMessageA
push 0
push 0
push 0x102a
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, 0x4c28c4
xor edx, edx
call fcn.004494f8
mov eax, ebx
call fcn.00467478
mov eax, ebx
call fcn.004676b4
mov eax, 0x4c2894
call fcn.00480d5c
cmp byte [ebp - 0x51], 0
je 0x4650c3
push 0x7f00
push 0
call sub.USER32.DLL_LoadCursorA
push eax
call sub.USER32.DLL_SetCursor
mov eax, 0x4c28c4
xor edx, edx
call fcn.00449498
dec dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00465360
dec dword [ebp - 0x20]
cmp dword [0x4c4ce8], 0
jle 0x4650f1
dec dword [0x4c4ce8]
mov ecx, dword [ebp - 0x3c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret