Function at 0x10005bc7
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
mov dword [eax], ebx
mov eax, dword [ebp + 0xc]
push esi
mov dword [eax], ebx
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
call fcn.10004e9f
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
mov eax, dword [0x10008440]
push 0x6d
mov ecx, dword [eax + 0x10]
add ecx, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
call fcn.10003b9f
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 4]
push eax
call fcn.10003cfd
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.10004e9f
mov ecx, dword [ebp - 4]
call fcn.10006b50
push 0x18
pop edx
lea ecx, [ebp - 0x30]
call fcn.10004f58
lea ecx, [ebp - 0x24]
push 3
pop edx
mov dword [ebp - 0xc], eax
call fcn.10004f58
mov esi, eax
test esi, esi
je 0x10005c6f
push esi
call fcn.10006c0e
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx]
push 0xe
pop edx
lea ecx, [ebp - 0x24]
call fcn.10004f58
mov esi, eax
test esi, esi
je 0x10005c8e
push esi
call fcn.10006c0e
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx]
push 0x10
pop edx
lea ecx, [ebp - 0x24]
call fcn.10004f58
mov edi, eax
test edi, edi
je 0x10005cad
push edi
call fcn.10006c0e
mov esi, dword [edi]
push 1
mov ecx, edi
call dword [esi]
push 0x18
pop edx
lea ecx, [ebp - 0x24]
call fcn.10004f58
mov esi, eax
test esi, esi
je 0x10005ccc
push esi
call fcn.10006c0e
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx]
push ecx
lea ecx, [ebp - 0x24]
call fcn.10004f2b
mov ecx, eax
test ecx, ecx
je 0x10005cfc
mov edx, 0x2af8
call fcn.10004f0e
mov esi, eax
test esi, esi
je 0x10005cfc
push esi
add ecx, 0x14
call fcn.10006c0e
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx]
mov esi, dword [ebp - 0xc]
test esi, esi
je 0x10005d15
push esi
lea ecx, [ebp - 0x30]
call fcn.10006c0e
lea ecx, [ebp - 0x24]
push esi
call fcn.10006c40
lea ecx, [ebp - 0x30]
call fcn.10006c75
push ecx
lea ecx, [ebp - 0x24]
call fcn.10004f2b
mov eax, dword [eax + 0x14]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10005da6
mov ecx, dword [eax + 0x14]
mov dword [ebp - 8], ecx
test ecx, ecx
je 0x10005d9a
mov edi, dword [ecx + 0x2c]
mov ebx, dword [ecx + 0x28]
push 0
push dword [edi + ebx - 4]
lea edx, [edi - 8]
push dword [edi + ebx - 8]
mov ecx, ebx
call fcn.10003ac4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call dword [sym.imp.ntdll.dll_RtlRandom]
mov dword [edi + ebx - 8], eax
lea eax, [ebp - 4]
push eax
call dword [sym.imp.ntdll.dll_RtlRandom]
lea edx, [edi - 8]
push 1
push eax
push dword [edi + ebx - 8]
mov ecx, ebx
mov dword [edi + ebx - 4], eax
call fcn.10003ac4
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 8]
mov dword [ebp - 8], ecx
test ecx, ecx
jne 0x10005d3a
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov dword [ebp - 0xc], eax
test eax, eax
jne 0x10005d30
xor ebx, ebx
lea edx, [ebp - 4]
lea ecx, [ebp - 0x24]
call fcn.100049d8
mov ecx, dword [ebp - 4]
call fcn.10006b40
push dword [ebp - 4]
mov esi, eax
xor dl, dl
mov ecx, esi
call fcn.10006a20
mov edx, esi
push dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x24]
call fcn.1000462d
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 4]
push esi
call fcn.100042f8
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp + 8]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc]
mov ecx, esi
mov dword [edi], eax
call fcn.10006b50
mov edi, dword [edi]
mov ecx, 0x14c
mov eax, dword [edi + 0x3c]
add eax, edi
cmp word [eax + 4], cx
jne 0x10005e68
movzx esi, word [eax + 6]
mov edx, dword [eax + 0x28]
movzx ecx, word [eax + 0x14]
test esi, esi
je 0x10005e68
add ecx, 0x24
add ecx, eax
cmp dword [ecx], edx
ja 0x10005e33
mov eax, dword [ecx - 4]
add eax, dword [ecx]
cmp eax, edx
ja 0x10005e3d
inc ebx
add ecx, 0x28
cmp ebx, esi
jb 0x10005e26
jmp 0x10005e68
mov esi, dword [ecx + 8]
sub esi, dword [ecx]
add esi, edx
add esi, edi
mov bl, byte [esi]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp bl, 0x53
jne 0x10005e68
mov cl, byte [esi + 1]
add esi, 2
jmp 0x10005e63
mov dword [esi], eax
mov cl, byte [esi + 4]
lea esi, [esi + 5]
cmp cl, 0xb8
je 0x10005e5b
lea ecx, [ebp - 0x24]
call fcn.10006c75
xor eax, eax
pop edi
pop esi
inc eax
pop ebx
leave
ret 8