Function at 0x474138
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x47461c
push dword fs:[eax]
mov dword fs:[eax], esp
or edx, 0xffffffff
mov eax, dword [0x63c8e0]
call fcn.00473970
mov eax, esi
sub eax, 1
jb 0x474182
je 0x4741f2
dec eax
je 0x47425f
dec eax
je 0x4742c9
jmp 0x474334
push 2
mov edx, 0x47462c
xor ecx, ecx
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 1
mov edx, 0x474630
mov ecx, 0x25
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x474638
mov ecx, 0xc8
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x474644
mov ecx, 0x50
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x47464c
mov ecx, 0xcb
mov eax, dword [0x63c8e0]
call fcn.004738f0
jmp 0x474334
push 2
mov edx, 0x47462c
xor ecx, ecx
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 1
mov edx, 0x474630
mov ecx, 0x25
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x474638
mov ecx, 0xc8
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x474654
mov ecx, 0x11b
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x47462c
xor ecx, ecx
mov eax, dword [0x63c8e0]
call fcn.004738f0
jmp 0x474334
push 2
mov edx, 0x47462c
xor ecx, ecx
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 1
mov edx, 0x474630
mov ecx, 0x25
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x474638
mov ecx, 0xc8
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x47465c
mov ecx, 0x11b
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x47462c
xor ecx, ecx
mov eax, dword [0x63c8e0]
call fcn.004738f0
jmp 0x474334
push 2
mov edx, 0x47462c
xor ecx, ecx
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 1
mov edx, 0x474630
mov ecx, 0x25
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x474664
mov ecx, 0xc8
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x474670
mov ecx, 0xc8
mov eax, dword [0x63c8e0]
call fcn.004738f0
push 2
mov edx, 0x47467c
mov ecx, 0x53
mov eax, dword [0x63c8e0]
call fcn.004738f0
mov eax, dword [esi*4 + 0x63c8cc]
cmp dword [eax + 0x20], 0
jle 0x4744c0
xor edx, edx
call fcn.00424020
mov ebx, eax
cmp word [ebx + 2], 0x2418
jne 0x474429
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 4], eax
mov eax, dword [esi*4 + 0x63c8cc]
push dword [eax + 4]
mov eax, dword [ebp - 4]
pop edx
sub eax, edx
mov ecx, 0x3e8
xor edx, edx
div ecx
cmp eax, 0x3c
ja 0x474429
push 0x47468c
mov eax, dword [esi*4 + 0x63c8cc]
push dword [eax + 4]
mov eax, dword [ebp - 4]
pop edx
sub eax, edx
mov ecx, 0x3e8
xor edx, edx
div ecx
push eax
mov eax, 0x3c
pop edx
sub eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x10]
call fcn.004225a0
push dword [ebp - 0x10]
push 0x47469c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040575c
mov eax, dword [ebp - 0xc]
call fcn.00405858
push eax
mov eax, dword [0x63c8e4]
push eax
call sub.user32.dll_SetWindowTextA
cmp word [ebx + 4], 0xffff
jne 0x474401
push 0x10
push 0x4746bc
push 0x4746c4
mov eax, dword [0x63c8dc]
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x474418
push 0x10
push 0x4746bc
push 0x4746d4
mov eax, dword [0x63c8dc]
push eax
call sub.user32.dll_MessageBoxA_1
mov eax, dword [esi*4 + 0x63c8cc]
call fcn.0047393c
jmp 0x474601
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [esi*4 + 0x63c8cc]
sub eax, dword [edx + 4]
mov ecx, 0x3e8
xor edx, edx
div ecx
cmp eax, 0x1e
jae 0x4744c0
or eax, 0xffffffff
call fcn.00473d78
cmp word [ebx + 4], 0xfffe
jne 0x47447e
push 0x10
push 0x4746bc
push 0x4746ec
mov eax, dword [0x63c8dc]
push eax
call sub.user32.dll_MessageBoxA_1
mov eax, dword [esi*4 + 0x63c8cc]
call fcn.0047393c
jmp 0x474601
mov eax, dword [esi*4 + 0x63c8cc]
mov ebx, dword [eax + 0x20]
dec ebx
test ebx, ebx
jl 0x4744af
inc ebx
xor edi, edi
mov eax, dword [esi*4 + 0x63c8cc]
mov edx, edi
call fcn.00424020
cmp esi, 3
sete cl
xor edx, edx
call fcn.00473a28
inc edi
dec ebx
jne 0x474490
mov eax, dword [esi*4 + 0x63c8cc]
call fcn.0047393c
jmp 0x474601
mov eax, dword [0x634008]
cmp byte [eax], 0
jne 0x4744f3
push 0
push 0
push 0x147
mov eax, dword [0x63c8e8]
push eax
call sub.user32.dll_SendMessageA
mov ebx, eax
mov eax, dword [0x633998]
add eax, 0x91
mov edx, ebx
call fcn.00424020
mov edi, eax
mov eax, dword [0x634008]
cmp byte [eax], 0
jne 0x474587
mov eax, dword [edi + 0x10]
call fcn.00405858
mov ebx, eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 8], eax
push ebx
mov eax, dword [0x63406c]
mov eax, dword [eax + 8]
push eax
call sub.kernel32.dll_lstrcmpA
test eax, eax
jne 0x474545
mov eax, dword [0x63406c]
movzx eax, word [eax + 4]
cmp eax, dword [ebp - 8]
jne 0x474545
call fcn.0047023c
test al, al
je 0x474545
mov eax, dword [0x63406c]
mov dword [eax + 0x14], edi
jmp 0x474587
lea edx, [ebp - 0x14]
mov eax, dword [edi + 0xc]
call fcn.0047089c
mov edx, dword [ebp - 0x14]
lea eax, [edi + 0x10]
call fcn.0040541c
mov eax, dword [edi + 0x10]
call fcn.00405858
mov ebx, eax
call fcn.00470440
mov eax, dword [0x63406c]
mov dword [eax + 0x14], edi
mov eax, dword [0x63406c]
mov dword [eax + 8], ebx
mov eax, dword [0x63406c]
movzx edx, word [ebp - 8]
mov word [eax + 4], dx
mov byte [0x48ec14], 1
mov eax, dword [esi*4 + 0x63c8cc]
call fcn.0047393c
push 0x42
call fcn.004070d8
pop ecx
mov ebx, eax
push 0x42
push ebx
call fcn.00423174
mov word [ebx], 0x42
mov eax, esi
add ax, 0x2419
mov word [ebx + 2], ax
mov eax, dword [0x63406c]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
call fcn.00405858
mov edx, eax
lea eax, [ebx + 0x32]
call fcn.004223ec
mov eax, dword [0x63406c]
mov eax, dword [eax + 0x14]
mov dword [ebx + 0x2e], eax
mov ecx, 0x42
mov edx, ebx
mov eax, esi
call fcn.00473e44
mov esi, 0x474708
lea edi, [ebx + 0x32]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
call fcn.004070e8
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x474623
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.004053ec
ret