Function at 0x10059387
Capabilities:
Check for time delay via gettickcount
Write file on windows

Disassembly:
push 0xa4
mov eax, 0x1008ad7a
call fcn.10063092
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 0x38]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x6c], eax
movzx eax, byte [ebp + 8]
xor ebx, ebx
imul eax, eax, 0x22
add eax, esi
cmp dword [ebp + 0x18], ebx
mov edx, dword [eax - 0x13]
mov dword [ebp - 0x64], edx
mov edx, dword [eax - 0xc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp + 0x3c]
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x35], bl
mov byte [ebp - 0x24], bl
mov byte [ebp - 0x23], bl
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], bl
mov byte [ebp - 0x1c], bl
mov byte [ebp - 0x1b], bl
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], bl
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x7c], ebx
mov byte [ebp - 0x2c], bl
mov byte [ebp - 0x2b], bl
mov byte [ebp - 0x2a], bl
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x28], bl
jle 0x1005942d
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x50], eax
cmp edi, ebx
je 0x10059436
mov eax, dword [edi]
mov dword [ebp - 0x68], eax
cmp ecx, ebx
je 0x10059449
push 6
push ecx
lea eax, [ebp - 0x24]
push eax
call fcn.10062770
add esp, 0xc
push 0xf000
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x40], eax
cmp eax, ebx
jne 0x100594a0
push 0x1010
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], ebx
cmp eax, ebx
je 0x10059483
push 0x10009e48
push ebx
push 4
push eax
call fcn.10037a50
add esp, 0x10
jmp 0x10059485
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x9c], eax
push 0x1008bdb8
lea eax, [ebp - 0x9c]
push eax
call fcn.1006330f
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 8]
cmp edi, ebx
je 0x100594b6
mov dword [ecx + 0x10], 0x8000
jmp 0x100594bd
mov dword [ecx + 0x10], 0xf000
cmp byte [esi + 1], bl
jne 0x100594ce
mov ecx, dword [ebp - 0x54]
mov edx, dword [eax + 8]
shl ecx, 4
mov dword [edx + 0x10], ecx
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x10]
xor edx, edx
div dword [ebp - 0x54]
mov dword [ebp - 0x34], eax
xor eax, eax
inc eax
cmp dword [ebp + 0x18], ebx
jle 0x100594f1
cmp dword [ebp + 0x18], eax
jne 0x100594ee
cmp byte [ebp + 0x34], al
je 0x100594f1
mov dword [ebp - 0x34], eax
cmp byte [ebp + 0x2c], 1
jne 0x100594fa
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x50]
sub eax, esi
inc eax
cdq
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x30], esi
mov edi, 0xf000
push edi
xor esi, esi
push ebx
push dword [ebp - 0x40]
inc esi
mov dword [ebp - 4], esi
mov byte [ebp - 0x41], 1
call fcn.100620c0
add esp, 0xc
cmp byte [ebp - 0x35], bl
jne 0x10059719
cmp byte [0x1009c319], 1
jne 0x1005955e
mov ecx, dword [ebp - 0x3c]
call fcn.1004074d
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x3c]
cmp byte [eax + 1], bl
jne 0x1005958b
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x34]
push eax
push dword [ebp - 0x40]
push ebx
push ebx
push ebx
push esi
push ebx
push ebx
push dword [ebp - 0x34]
push dword [ebp - 0x30]
push ebx
call fcn.1004122b
jmp 0x1005971c
push ebx
push dword [ebp - 0x34]
push dword [ebp - 0x30]
push edi
push dword [ebp - 0x40]
call fcn.10040862
cmp dword [ebp - 0x6c], 0xffffffff
je 0x1005971c
cmp dword [ebp + 0x18], ebx
jne 0x100595af
cmp byte [ebp + 0x34], bl
je 0x100595c2
cmp dword [ebp + 0x18], esi
jne 0x1005971c
cmp byte [ebp + 0x34], 1
jne 0x1005971c
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0x3c]
add eax, 4
push eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x30]
call fcn.1004ce1b
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x64]
jne 0x100595fe
push 6
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.10062770
add esp, 0xc
push 3
pop ecx
lea edi, [ebp - 0x24]
lea esi, [ebp - 0x1c]
xor eax, eax
repe cmpsw word [esi], word es:[edi]
mov ecx, dword [ebp - 0x30]
jne 0x1005961a
cmp ecx, dword [ebp - 0x50]
jne 0x1005971c
mov eax, dword [ebp - 0x48]
inc word [eax + 2]
lea edx, [ebp - 0x7c]
push edx
add eax, 4
push eax
lea eax, [ebp - 0x1c]
push eax
push ecx
sub ecx, dword [ebp - 0x34]
inc ecx
push ecx
mov ecx, dword [ebp - 0x3c]
call fcn.10053415
mov esi, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0x24]
push eax
lea eax, [esi - 1]
push eax
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.10045e8a
push 6
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.10062770
mov eax, dword [ebp - 0x84]
mov dword [eax], esi
push 6
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x80]
mov dword [ebp - 0x68], esi
call fcn.10062770
add esp, 0x18
jmp 0x1005971c
mov byte [ebp - 0x41], bl
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x41], bl
jne 0x100598d6
mov eax, dword [ebp + 0x1c]
mov edi, dword [ebp + 0x18]
inc eax
cmp edi, eax
jge 0x1005983c
cmp byte [ebp - 0x35], bl
jne 0x1005983c
mov esi, dword [ebp - 0x3c]
push ebx
lea eax, [ebp - 0x30]
push eax
push dword [esi + 0x11fd4]
mov dword [ebp - 4], 3
push 0x14
call dword [esi + 0x11fd0]
push dword [ebp - 0x80]
mov eax, dword [ebp - 0x30]
push dword [ebp - 0x84]
mov ecx, dword [ebp - 0x34]
push dword [ebp + 0x34]
lea ecx, [ecx + eax - 1]
push dword [ebp - 0x6c]
inc edi
push dword [ebp + 0x2c]
push dword [ebp + 0x28]
push ecx
push eax
push dword [ebp + 0x1c]
mov ecx, esi
push edi
mov edi, dword [ebp - 0x48]
push ebx
push dword [ebp - 0x78]
push edi
push dword [ebp + 8]
call fcn.10059387
mov eax, dword [ebp - 0x34]
or dword [ebp - 4], 0xffffffff
add dword [ebp - 0x5c], eax
adc dword [ebp - 0x58], ebx
add dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x50]
jg 0x10059a1e
movzx eax, byte [ebp + 8]
imul eax, eax, 0x22
mov eax, dword [eax + edi - 0xc]
sub eax, dword [ebp - 0x30]
cmp eax, 0x96
jge 0x100597ce
mov dword [ebp - 0x34], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [ebp + 0x14], ebx
jbe 0x10059528
mov edx, dword [ebp + 0x14]
imul edx, edx, 0x3e8
mov ecx, eax
sub ecx, dword [ebp - 0x60]
cmp ecx, edx
jbe 0x10059528
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0xa4]
push eax
mov eax, esi
push dword [eax + 0x11fd4]
push 0xb
call dword [eax + 0x11fd0]
jmp 0x10059528
cmp byte [ebp + 0x28], bl
jne 0x100598ac
movzx eax, byte [ebp + 8]
mov ecx, dword [ebp - 0x48]
imul eax, eax, 0x22
mov eax, dword [eax + ecx - 0xc]
sub eax, dword [ebp - 0x30]
cmp eax, 0xc8
jle 0x100598ac
push 0x1010
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 5
cmp eax, ebx
je 0x10059888
push dword [ebp - 0x30]
push 0x100057d8
push ebx
push 0xa
push eax
call fcn.10037a50
add esp, 0x14
mov ebx, eax
push dword [ebp - 0x40]
or dword [ebp - 4], 0xffffffff
call fcn.1006213f
mov dword [ebp - 0x8c], ebx
mov dword [esp], 0x1008bdb8
lea eax, [ebp - 0x8c]
jmp 0x1005949a
push 0xf000
push ebx
push dword [ebp - 0x40]
call fcn.100620c0
add esp, 0xc
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x3c]
push dword [eax + 0x11fd4]
push 0x12
call dword [eax + 0x11fd0]
mov edi, dword [ebp - 0x54]
mov esi, edi
imul esi, dword [ebp - 0x74]
push ebx
lea eax, [ebp - 0x70]
push eax
push esi
push dword [ebp - 0x4c]
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1005994e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x1010
mov esi, eax
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 6
cmp eax, ebx
je 0x1005992a
push esi
push 0x10005788
push esi
push 5
push eax
call fcn.10037a50
add esp, 0x14
mov ebx, eax
push dword [ebp - 0x40]
or dword [ebp - 4], 0xffffffff
call fcn.1006213f
mov dword [ebp - 0x94], ebx
mov dword [esp], 0x1008bdb8
lea eax, [ebp - 0x94]
jmp 0x1005949a
cmp dword [ebp - 0x70], esi
je 0x100599ab
push 0x1010
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 7
cmp eax, ebx
je 0x10059987
imul edi, dword [ebp - 0x34]
push edi
push dword [ebp - 0x70]
push 0x10005720
push ebx
push 0xa
push eax
call fcn.10037a50
add esp, 0x18
mov ebx, eax
push dword [ebp - 0x40]
or dword [ebp - 4], 0xffffffff
call fcn.1006213f
mov dword [ebp - 0x90], ebx
mov dword [esp], 0x1008bdb8
lea eax, [ebp - 0x90]
jmp 0x1005949a
mov eax, dword [ebp - 0x3c]
cmp byte [eax + 0x11c76], 1
jne 0x10059a0a
push 0x1010
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 8
cmp eax, ebx
je 0x100599e6
push dword [ebp - 0x30]
push 0x100056d0
push ebx
push 0xe
push eax
call fcn.10037a50
add esp, 0x14
mov ebx, eax
push dword [ebp - 0x40]
or dword [ebp - 4], 0xffffffff
call fcn.1006213f
mov dword [ebp - 0x88], ebx
mov dword [esp], 0x1008bdb8
lea eax, [ebp - 0x88]
jmp 0x1005949a
mov eax, dword [ebp - 0x34]
add dword [ebp - 0x5c], eax
adc dword [ebp - 0x58], ebx
add dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x50]
jle 0x10059a38
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
push dword [ebp - 0x40]
call fcn.1006213f
pop ecx
call fcn.100630fd
ret 0x38
movzx ecx, byte [ebp + 8]
mov edx, dword [ebp - 0x48]
imul ecx, ecx, 0x22
mov ecx, dword [ecx + edx - 0xc]
sub ecx, dword [ebp - 0x30]
cmp ecx, 0x96
jge 0x10059a7f
lea edx, [ecx + 1]
cmp edx, eax
jae 0x10059a7f
mov ecx, dword [ebp - 0x50]
sub ecx, eax
inc ecx
cmp ecx, dword [ebp - 0x64]
jge 0x10059a6e
xor eax, eax
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x74], eax
jmp 0x10059a7f
sub eax, edx
imul eax, edi
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x4c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [ebp + 0x14], ebx
jbe 0x10059528
mov edx, dword [ebp + 0x14]
imul edx, edx, 0x3e8
mov ecx, eax
sub ecx, dword [ebp - 0x60]
cmp ecx, edx
jbe 0x10059528
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0xa4]
push eax
mov eax, dword [ebp - 0x3c]
push dword [eax + 0x11fd4]
push 0xb
call dword [eax + 0x11fd0]
jmp 0x10059528