Function at 0x10001b3c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0x94
mov eax, 0x1005029b
call fcn.10035d88
mov edi, ecx
call fcn.10015ea1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea esi, [ebp - 0xa0]
mov dword [ebp - 0x24], eax
call fcn.10014253
xor ebx, ebx
push ebx
push 0x87
mov ecx, esi
mov dword [ebp - 4], ebx
call fcn.100163d8
mov ecx, esi
call fcn.10014275
push 5
mov ecx, esi
call fcn.1001cd58
call fcn.100019c5
push ebx
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call fcn.1002279b
mov esi, eax
cmp esi, ebx
je 0x10001bf4
call fcn.10015422
push eax
lea ecx, [ebp - 0x10]
call fcn.100012c1
push 0x65
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.10004577
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], ebx
je 0x10001be6
push ebx
push ebx
push 0x800
push dword [esi + 4]
call dword [sym.imp.USER32.dll_AppendMenuA]
push dword [ebp - 0x10]
push 0x10
push ebx
push dword [esi + 4]
call dword [sym.imp.USER32.dll_AppendMenuA]
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.10001019
lea esi, [edi + 0x430]
push dword [esi]
push 1
push 0x80
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [esi]
push ebx
push 0x80
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [edi]
mov ecx, edi
mov byte [edi + 0x75], 1
mov byte [edi + 0x74], 1
call dword [eax + 0x6c]
mov esi, dword [sym.imp.USER32.dll_CheckMenuItem]
push 8
push 0x801c
push dword [eax + 4]
call esi
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x6c]
push ebx
push 0x801e
push dword [eax + 4]
call esi
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x6c]
push ebx
push 0x801f
push dword [eax + 4]
call esi
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x6c]
push ebx
push 0x8020
push dword [eax + 4]
call esi
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x6c]
push ebx
push 0x8021
push dword [eax + 4]
call esi
push 3
push 3
push 0xfe
push 0x10
lea esi, [edi + 0x120]
push 0x10
mov ecx, esi
call fcn.10014ac8
call fcn.10016c4d
push 0xb1
call fcn.1000196d
push eax
mov eax, esi
call fcn.100018c9
call fcn.10016c4d
push 0xb0
call fcn.1000196d
push eax
mov eax, esi
call fcn.100018c9
call fcn.10016c4d
push 0x96
call fcn.1000196d
push eax
mov eax, esi
call fcn.100018c9
cmp esi, ebx
jne 0x10001ced
xor esi, esi
jmp 0x10001cf0
mov esi, dword [esi + 4]
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push 0x1109
push dword [edi + 0x98]
call esi
push eax
call fcn.1001496b
push 0x415
mov ecx, edi
call fcn.1001cba2
push ebx
push ebx
push 0x14e
push dword [eax + 0x20]
call esi
push ebx
push ebx
push 0x100590c0
push ebx
lea esi, [edi + 0xcc]
push 1
mov ecx, esi
call fcn.100144ba
push ebx
push ebx
push 0x100590c8
push 1
push 1
mov ecx, esi
call fcn.100144ba
push ebx
push ebx
push 0x100590d4
push 2
push 1
mov ecx, esi
call fcn.100144ba
push ebx
push ebx
push 0x100590e0
push 3
push 1
mov ecx, esi
call fcn.100144ba
push ebx
push ebx
push 0x100590ec
push 4
push 1
mov ecx, esi
call fcn.100144ba
lea ebx, [edi + 0x360]
mov eax, dword [ebx]
push esi
push 0x83
mov ecx, ebx
call dword [eax + 0x140]
lea ecx, [edi + 0x284]
mov eax, dword [ecx]
push esi
push 0x84
call dword [eax + 0x140]
lea ecx, [edi + 0x210]
mov eax, dword [ecx]
push esi
push 0x8e
call dword [eax + 0x140]
lea ecx, [edi + 0x19c]
mov eax, dword [ecx]
push esi
push 0x8f
call dword [eax + 0x140]
lea ecx, [edi + 0x128]
mov eax, dword [ecx]
push esi
push 0x90
call dword [eax + 0x140]
lea eax, [ebp - 0x20]
push eax
push dword [edi + 0xec]
call dword [sym.imp.USER32.dll_GetClientRect]
add dword [ebp - 0x1c], 0x1e
add dword [ebp - 0x20], 8
sub dword [ebp - 0x18], 8
sub dword [ebp - 0x14], 8
push ebx
lea eax, [ebp - 0x20]
call fcn.10001923
lea eax, [edi + 0x284]
push eax
lea eax, [ebp - 0x20]
call fcn.10001923
lea eax, [edi + 0x210]
push eax
lea eax, [ebp - 0x20]
call fcn.10001923
lea eax, [edi + 0x19c]
push eax
lea eax, [ebp - 0x20]
call fcn.10001923
lea eax, [edi + 0x128]
push eax
lea eax, [ebp - 0x20]
call fcn.10001923
push 5
mov ecx, ebx
call fcn.1001cd58
movzx eax, byte [0x10092ad8]
push eax
push edi
call fcn.10003abb
call fcn.10016c4d
mov eax, dword [eax + 8]
push 0x40005
push eax
push 0xb6
call dword [sym.imp.WINMM.dll_PlaySoundA]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edi, 0x5dc
jmp 0x10001e93
call fcn.100019c5
call esi
sub eax, dword [ebp - 0x24]
cmp eax, edi
jb 0x10001e8c
lea ecx, [ebp - 0xa0]
call fcn.10019f28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0]
call fcn.10015a5b
xor eax, eax
inc eax
call fcn.10035e60
ret