Function at 0x477cf0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x4781d4
push dword fs:[eax]
mov dword fs:[eax], esp
or edx, 0xffffffff
mov eax, dword [0x65a998]
call fcn.00477528
mov eax, esi
sub eax, 1
jb 0x477d3a
je 0x477daa
dec eax
je 0x477e17
dec eax
je 0x477e81
jmp 0x477eec
push 2
mov edx, 0x4781e4
xor ecx, ecx
mov eax, dword [0x65a998]
call fcn.004774a8
push 1
mov edx, 0x4781e8
mov ecx, 0x25
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x4781f0
mov ecx, 0xc8
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x4781fc
mov ecx, 0x50
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x478204
mov ecx, 0xcb
mov eax, dword [0x65a998]
call fcn.004774a8
jmp 0x477eec
push 2
mov edx, 0x4781e4
xor ecx, ecx
mov eax, dword [0x65a998]
call fcn.004774a8
push 1
mov edx, 0x4781e8
mov ecx, 0x25
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x4781f0
mov ecx, 0xc8
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x47820c
mov ecx, 0x11b
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x4781e4
xor ecx, ecx
mov eax, dword [0x65a998]
call fcn.004774a8
jmp 0x477eec
push 2
mov edx, 0x4781e4
xor ecx, ecx
mov eax, dword [0x65a998]
call fcn.004774a8
push 1
mov edx, 0x4781e8
mov ecx, 0x25
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x4781f0
mov ecx, 0xc8
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x478214
mov ecx, 0x11b
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x4781e4
xor ecx, ecx
mov eax, dword [0x65a998]
call fcn.004774a8
jmp 0x477eec
push 2
mov edx, 0x4781e4
xor ecx, ecx
mov eax, dword [0x65a998]
call fcn.004774a8
push 1
mov edx, 0x4781e8
mov ecx, 0x25
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x47821c
mov ecx, 0xc8
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x478228
mov ecx, 0xc8
mov eax, dword [0x65a998]
call fcn.004774a8
push 2
mov edx, 0x478234
mov ecx, 0x53
mov eax, dword [0x65a998]
call fcn.004774a8
mov eax, dword [esi*4 + 0x65a984]
cmp dword [eax + 0x20], 0
jle 0x478078
xor edx, edx
call fcn.00423dec
mov ebx, eax
cmp word [ebx + 2], 0x2418
jne 0x477fe1
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 4], eax
mov eax, dword [esi*4 + 0x65a984]
push dword [eax + 4]
mov eax, dword [ebp - 4]
pop edx
sub eax, edx
mov ecx, 0x3e8
xor edx, edx
div ecx
cmp eax, 0x3c
ja 0x477fe1
push 0x478244
mov eax, dword [esi*4 + 0x65a984]
push dword [eax + 4]
mov eax, dword [ebp - 4]
pop edx
sub eax, edx
mov ecx, 0x3e8
xor edx, edx
div ecx
push eax
mov eax, 0x3c
pop edx
sub eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x10]
call fcn.00422150
push dword [ebp - 0x10]
push 0x478254
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405720
mov eax, dword [ebp - 0xc]
call fcn.0040581c
push eax
mov eax, dword [0x65a99c]
push eax
call sub.user32.dll_SetWindowTextA
cmp word [ebx + 4], 0xffff
jne 0x477fb9
push 0x10
push 0x478274
push 0x47827c
mov eax, dword [0x65a994]
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x477fd0
push 0x10
push 0x478274
push 0x47828c
mov eax, dword [0x65a994]
push eax
call sub.user32.dll_MessageBoxA_1
mov eax, dword [esi*4 + 0x65a984]
call fcn.004774f4
jmp 0x4781b9
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [esi*4 + 0x65a984]
sub eax, dword [edx + 4]
mov ecx, 0x3e8
xor edx, edx
div ecx
cmp eax, 0x1e
jae 0x478078
or eax, 0xffffffff
call fcn.00477930
cmp word [ebx + 4], 0xfffe
jne 0x478036
push 0x10
push 0x478274
push 0x4782a4
mov eax, dword [0x65a994]
push eax
call sub.user32.dll_MessageBoxA_1
mov eax, dword [esi*4 + 0x65a984]
call fcn.004774f4
jmp 0x4781b9
mov eax, dword [esi*4 + 0x65a984]
mov ebx, dword [eax + 0x20]
dec ebx
test ebx, ebx
jl 0x478067
inc ebx
xor edi, edi
mov eax, dword [esi*4 + 0x65a984]
mov edx, edi
call fcn.00423dec
cmp esi, 3
sete cl
xor edx, edx
call fcn.004775e0
inc edi
dec ebx
jne 0x478048
mov eax, dword [esi*4 + 0x65a984]
call fcn.004774f4
jmp 0x4781b9
mov eax, dword [0x651fd8]
cmp byte [eax], 0
jne 0x4780ab
push 0
push 0
push 0x147
mov eax, dword [0x65a9a0]
push eax
call sub.user32.dll_SendMessageA
mov ebx, eax
mov eax, dword [0x65197c]
add eax, 0x91
mov edx, ebx
call fcn.00423dec
mov edi, eax
mov eax, dword [0x651fd8]
cmp byte [eax], 0
jne 0x47813f
mov eax, dword [edi + 0x10]
call fcn.0040581c
mov ebx, eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 8], eax
push ebx
mov eax, dword [0x65203c]
mov eax, dword [eax + 8]
push eax
call sub.kernel32.dll_lstrcmpA
test eax, eax
jne 0x4780fd
mov eax, dword [0x65203c]
movzx eax, word [eax + 4]
cmp eax, dword [ebp - 8]
jne 0x4780fd
call fcn.00469890
test al, al
je 0x4780fd
mov eax, dword [0x65203c]
mov dword [eax + 0x14], edi
jmp 0x47813f
lea edx, [ebp - 0x14]
mov eax, dword [edi + 0xc]
call fcn.00469ef0
mov edx, dword [ebp - 0x14]
lea eax, [edi + 0x10]
call fcn.004053e0
mov eax, dword [edi + 0x10]
call fcn.0040581c
mov ebx, eax
call fcn.00469a94
mov eax, dword [0x65203c]
mov dword [eax + 0x14], edi
mov eax, dword [0x65203c]
mov dword [eax + 8], ebx
mov eax, dword [0x65203c]
movzx edx, word [ebp - 8]
mov word [eax + 4], dx
mov byte [0x55081c], 1
mov eax, dword [esi*4 + 0x65a984]
call fcn.004774f4
push 0x42
call fcn.0040709c
pop ecx
mov ebx, eax
push 0x42
push ebx
call fcn.00422e7c
mov word [ebx], 0x42
mov eax, esi
add ax, 0x2419
mov word [ebx + 2], ax
mov eax, dword [0x65203c]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
call fcn.0040581c
mov edx, eax
lea eax, [ebx + 0x32]
call fcn.00421f9c
mov eax, dword [0x65203c]
mov eax, dword [eax + 0x14]
mov dword [ebx + 0x2e], eax
mov ecx, 0x42
mov edx, ebx
mov eax, esi
call fcn.004779fc
mov esi, 0x4782c0
lea edi, [ebx + 0x32]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
call fcn.004070ac
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4781db
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.004053b0
ret