Function at 0x1006fcf0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
cmp byte [0x1019017d], 0
push esi
push edi
je 0x1006fea6
mov esi, dword [ebp + 8]
mov ecx, 0x1018c580
push 0
push 0xee
push esi
call fcn.10076ff0
test al, al
je 0x1006fe87
mov al, byte [0x1018ad56]
movzx ecx, word [0x1018ad54]
mov byte [ebp - 0x1e], al
mov edx, ecx
mov al, byte [0x1018ad57]
mov byte [ebp - 0x1d], al
mov al, byte [0x1018ad58]
mov byte [ebp - 0x1c], al
mov al, byte [0x1018ad5a]
mov byte [ebp - 0x1b], al
mov al, byte [0x1018ad5b]
mov byte [ebp - 0x1a], al
mov al, byte [0x1018ad5c]
mov byte [ebp - 0x19], al
mov al, byte [0x1018ad5d]
mov esi, dword [0x1018ad98]
mov byte [ebp - 0x18], al
mov al, byte [0x1018ad5e]
mov byte [ebp - 0x17], al
mov al, byte [0x1018ad5f]
mov byte [ebp - 0x16], al
mov al, byte [0x1018ad60]
shl edx, 4
add edx, dword [0x1018ad8c]
mov byte [ebp - 0x15], al
mov eax, 0x200
mov word [ebp - 0x20], cx
cwde
movzx ecx, byte [edx + 1]
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx + 2]
mov dword [ebp - 0x24], 0x17ff16c1
add cx, ax
mov eax, dword [0x1018ad9c]
sub eax, esi
movzx edi, cx
sar eax, 3
xor ecx, ecx
test eax, eax
je 0x1006fdde
mov edx, esi
movsx edi, di
cmp edi, dword [esi + ecx*8]
je 0x1006fe69
mov eax, dword [0x1018ad9c]
mov edx, esi
sub eax, edx
inc ecx
sar eax, 3
cmp ecx, eax
jb 0x1006fdc4
xor al, al
mov byte [ebp - 0x14], al
lea ecx, [ebp - 0x24]
mov al, byte [0x1018ad61]
mov edx, 0x16
mov byte [ebp - 0x13], al
mov al, byte [0x1018ad62]
mov byte [ebp - 0x12], al
mov al, byte [0x1018ad63]
mov byte [ebp - 0x11], al
mov al, byte [0x1018ad64]
mov byte [ebp - 0x10], al
mov al, byte [0x1018ad65]
mov byte [ebp - 0xf], al
call fcn.100c5f00
pop edi
mov byte [0x1019017d], 0
mov byte [0x1018f7fd], 0
mov word [0x1018ad50], 0
mov dword [0x1018ad52], 0
mov dword [0x1018ad56], 0x100
mov dword [0x1018ad5a], 0
mov dword [0x1018ad5e], 0
mov dword [0x1018ad62], 1
pop esi
mov esp, ebp
pop ebp
ret 4
movzx eax, byte [0x1018ad59]
add eax, edx
mov al, byte [eax + ecx*8 + 3]
test al, al
jne 0x1006fde0
mov al, byte [edx + ecx*8 + 5]
jmp 0x1006fde0
push 0
push 0xef
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x1007055e
jmp 0x1006fe18
cmp byte [0x1018f7fd], 0
je 0x1007055e
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [0x1018f7f8]
cmp eax, 0x32
jb 0x1007055e
call esi
mov esi, dword [ebp + 8]
mov dword [0x1018f7f8], eax
mov al, byte [0x1018ad50]
test al, al
jne 0x1006ff16
xor eax, eax
mov dword [ebp + 8], eax
push 0
add eax, 0xc9
mov ecx, 0x1018c580
push eax
push esi
call fcn.10076ff0
test al, al
mov eax, dword [ebp + 8]
je 0x1006ff08
mov byte [0x1018ad51], al
mov byte [0x1018ad50], 1
inc eax
mov dword [ebp + 8], eax
cmp eax, 7
jl 0x1006fee2
jmp 0x100704d7
cmp al, 1
jne 0x1006ff54
xor eax, eax
mov dword [ebp + 8], eax
nop
push 0
add eax, 0xc9
mov ecx, 0x1018c580
push eax
push esi
call fcn.10076ff0
test al, al
mov eax, dword [ebp + 8]
je 0x1006ff46
mov byte [0x1018ad52], al
mov byte [0x1018ad50], 2
inc eax
mov dword [ebp + 8], eax
cmp eax, 9
jl 0x1006ff20
jmp 0x100704d7
cmp al, 2
jne 0x10070102
mov eax, dword [0x1018ad90]
xor ecx, ecx
mov edx, dword [0x1018ad8c]
xor edi, edi
sub eax, edx
mov dword [ebp - 4], ecx
sar eax, 4
test eax, eax
je 0x10070025
mov dword [ebp - 8], ecx
nop
mov esi, dword [ebp - 8]
mov al, byte [0x1018ad51]
cmp al, byte [esi + edx]
mov esi, dword [ebp + 8]
jne 0x1007000b
mov eax, dword [ebp - 8]
movzx eax, byte [eax + edx + 1]
cmp eax, 0xd
ja 0x1006ffac
mov ecx, eax
call fcn.10070570
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], eax
jmp 0x1006ffb3
mov dword [ebp - 0xc], 0xffffffff
movzx eax, byte [0x1018ad52]
cmp eax, dword [ebp - 0xc]
jne 0x1007000b
movzx eax, byte [0x1018ad53]
lea ecx, [eax + eax*4]
add ecx, ecx
cmp edi, ecx
jl 0x10070007
lea eax, [ecx + 0xa]
cmp edi, eax
jge 0x10070007
mov eax, edi
sub eax, ecx
mov ecx, 0x1018c580
push 0
add eax, 0xc9
push eax
push esi
call fcn.10076ff0
mov edx, dword [0x1018ad8c]
test al, al
je 0x10070007
mov eax, dword [ebp - 4]
mov word [0x1018ad54], ax
mov byte [0x1018ad50], 3
mov ecx, dword [ebp - 4]
inc edi
mov eax, dword [0x1018ad90]
inc ecx
add dword [ebp - 8], 0x10
sub eax, edx
sar eax, 4
mov dword [ebp - 4], ecx
cmp ecx, eax
jb 0x1006ff80
push 0
push 0xd3
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x1007004b
mov al, byte [0x1018ad53]
test al, al
je 0x1007004b
dec al
mov byte [0x1018ad53], al
push 0
push 0xd4
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x100704d7
mov edx, dword [0x1018ad90]
xor ecx, ecx
mov eax, edx
mov dword [ebp + 8], ecx
sub eax, dword [0x1018ad8c]
sar eax, 4
test eax, eax
je 0x100700d3
mov eax, dword [0x1018ad8c]
xor edi, edi
sub edx, eax
sar edx, 4
nop dword [eax + eax]
mov cl, byte [0x1018ad51]
cmp cl, byte [eax + edi]
mov ecx, dword [ebp + 8]
jne 0x100700cb
movzx ecx, byte [eax + edi + 1]
cmp ecx, 0xd
ja 0x100700b1
call fcn.10070570
mov ecx, eax
jmp 0x100700b4
or ecx, 0xffffffff
movzx eax, byte [0x1018ad52]
cmp eax, ecx
mov ecx, dword [ebp + 8]
mov eax, dword [0x1018ad8c]
jne 0x100700cb
inc ecx
mov dword [ebp + 8], ecx
add edi, 0x10
sub edx, 1
jne 0x10070090
mov eax, 0x66666667
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dl, byte [0x1018ad53]
movzx eax, dl
cmp eax, ecx
jge 0x100704d7
inc dl
mov byte [0x1018ad53], dl
jmp 0x100704d7
cmp al, 3
jne 0x100704d7
push 0
push 0xe5
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x10070134
mov al, byte [0x1018ad56]
cmp al, byte [0x1018ad68]
jae 0x10070134
inc al
mov byte [0x1018ad56], al
push 0
push 0xe6
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x1007015a
mov al, byte [0x1018ad56]
test al, al
je 0x1007015a
dec al
mov byte [0x1018ad56], al
push 0
push 0xe9
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x10070180
mov al, byte [0x1018ad58]
cmp al, 7
jae 0x10070180
inc al
mov byte [0x1018ad58], al
push 0
push 0xea
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x100701a6
mov al, byte [0x1018ad58]
test al, al
je 0x100701a6
dec al
mov byte [0x1018ad58], al
push 0
push 0xeb
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x100701d0
mov al, byte [0x1018ad57]
cmp al, byte [0x1018ad69]
jae 0x100701d0
inc al
mov byte [0x1018ad57], al
push 0
push 0xec
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x100701f6
mov al, byte [0x1018ad57]
test al, al
je 0x100701f6
dec al
mov byte [0x1018ad57], al
push 0
push 0xd9
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x1007021a
cmp byte [0x1018ad5a], 0
sete byte [0x1018ad5a]
cmp byte [0x1018ad59], 0
jne 0x100704b3
push 0
push 0xda
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x10070252
cmp byte [0x1018ad5b], 0
mov byte [0x1018ad59], 0
sete byte [0x1018ad5b]
push 0
push 0xdb
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x1007027d
cmp byte [0x1018ad5c], 0
mov byte [0x1018ad59], 0
sete byte [0x1018ad5c]
push 0
push 0xdc
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x100702a8
cmp byte [0x1018ad5d], 0
mov byte [0x1018ad59], 0
sete byte [0x1018ad5d]
push 0
push 0xdd
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x100702d3
cmp byte [0x1018ad5e], 0
mov byte [0x1018ad59], 0
sete byte [0x1018ad5e]
push 0
push 0xde
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x100702fe
cmp byte [0x1018ad5f], 0
mov byte [0x1018ad59], 0
sete byte [0x1018ad5f]
push 0
push 0xdf
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x10070329
cmp byte [0x1018ad60], 0
mov byte [0x1018ad59], 0
sete byte [0x1018ad60]
push 0
push 0xe0
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x1007038a
mov al, byte [0x1018ad62]
test al, al
sete byte [0x1018ad62]
test al, al
jne 0x10070361
mov word [0x1018ad63], 0
mov byte [0x1018ad65], al
jmp 0x1007037c
cmp byte [0x1018ad63], 0
jne 0x10070383
cmp byte [0x1018ad64], 0
jne 0x10070383
cmp byte [0x1018ad65], 0
jne 0x10070383
mov byte [0x1018ad62], 1
mov byte [0x1018ad59], 0
push 0
push 0xe1
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
mov edi, 1
test al, al
je 0x100703ed
mov al, byte [0x1018ad63]
test al, al
sete byte [0x1018ad63]
test al, al
jne 0x100703c7
mov byte [0x1018ad62], al
mov word [0x1018ad64], 0
jmp 0x100703e6
cmp byte [0x1018ad64], 0
jne 0x100703e6
movzx eax, byte [0x1018ad62]
cmp byte [0x1018ad65], 0
cmove eax, edi
mov byte [0x1018ad62], al
mov byte [0x1018ad59], 0
push 0
push 0xe2
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x1007044f
mov al, byte [0x1018ad64]
test al, al
sete byte [0x1018ad64]
test al, al
jne 0x10070425
mov word [0x1018ad62], 0
mov byte [0x1018ad65], al
jmp 0x10070448
cmp byte [0x1018ad63], 0
jne 0x10070448
test al, al
je 0x10070448
movzx eax, byte [0x1018ad62]
cmp byte [0x1018ad65], 0
cmove eax, edi
mov byte [0x1018ad62], al
mov byte [0x1018ad59], 0
push 0
push 0xe3
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x100704b3
mov cl, byte [0x1018ad65]
test cl, cl
sete byte [0x1018ad65]
test cl, cl
jne 0x10070489
mov word [0x1018ad62], 0
mov byte [0x1018ad64], cl
jmp 0x100704ac
cmp byte [0x1018ad63], 0
jne 0x100704ac
cmp byte [0x1018ad64], 0
jne 0x100704ac
movzx eax, byte [0x1018ad62]
test cl, cl
cmovne eax, edi
mov byte [0x1018ad62], al
mov byte [0x1018ad59], 0
push 0
push 0xe4
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x100704d7
cmp byte [0x1018ad61], 0
sete byte [0x1018ad61]
cmp byte [0x1018ad50], 3
mov ecx, 0x1018c580
push 0
jne 0x10070521
push 0xe7
push esi
call fcn.10076ff0
test al, al
je 0x100704fc
dec byte [0x1018ad50]
push 0
push 0xe8
push esi
mov ecx, 0x1018c580
call fcn.10076ff0
test al, al
je 0x1007055e
pop edi
mov byte [0x1019017d], 1
pop esi
mov esp, ebp
pop ebp
ret 4
push 0xc8
push esi
call fcn.10076ff0
test al, al
je 0x1007055e
mov al, byte [0x1018ad50]
test al, al
jne 0x10070550
mov ecx, 0x1018ad50
mov byte [0x1018f7fd], al
call fcn.100707c0
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
dec al
mov byte [0x1018ad53], 0
mov byte [0x1018ad50], al
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4