Function at 0x10028580
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x10042fd0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
push edi
call esi
xor ebx, ebx
mov edi, eax
mov dword [ebp - 0x1c], edi
cmp byte [0x101e95e1], bl
je 0x100286c8
cmp byte [0x101e79a9], bl
jne 0x100286c8
mov eax, 0xc2
mov ecx, 0x101e79a8
call fcn.1000fd40
test al, al
je 0x1002869d
cmp dword [ebp + 8], 0x201
jne 0x100285f6
pop edi
pop esi
mov byte [0x101e96b8], 1
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10036e30
mov esp, ebp
pop ebp
ret 4
mov eax, edi
sub eax, dword [0x101e96b4]
mov byte [0x101e96b8], bl
cmp eax, 0x1f4
jb 0x100286c8
call esi
mov cl, byte [0x101163dc]
xor cl, 1
mov dword [0x101e96b4], eax
mov byte [0x101163dc], cl
xor eax, eax
cmp cl, 1
jne 0x10028665
cmp eax, 4
ja case.default.0x1002866a
jmp dword [eax*4 + 0x10028a1c]
mov byte [0x101163df], 1
jmp case.default.0x1002866a
mov byte [0x101163e0], 1
jmp case.default.0x1002866a
mov byte [0x101163e1], 1
jmp case.default.0x1002866a
mov byte [0x101163e2], 1
jmp case.default.0x1002866a
mov byte [0x101163e3], 1
jmp case.default.0x1002866a
cmp eax, 4
ja case.default.0x1002866a
jmp dword [eax*4 + 0x10028a30]
mov byte [0x101163df], bl
jmp case.default.0x1002866a
mov byte [0x101163e0], bl
jmp case.default.0x1002866a
mov byte [0x101163e1], bl
jmp case.default.0x1002866a
mov byte [0x101163e2], bl
jmp case.default.0x1002866a
mov byte [0x101163e3], bl
inc eax
cmp eax, 5
jl 0x10028627
mov eax, 0xd6
mov ecx, 0x101e79a8
call fcn.1000fd40
test al, al
je 0x10028711
cmp byte [0x101163dc], bl
je 0x100286c8
cmp dword [ebp + 8], 0x201
jne 0x100286dd
mov byte [0x101e9988], 1
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10036e30
mov esp, ebp
pop ebp
ret 4
mov ecx, edi
sub ecx, dword [0x101e9984]
mov byte [0x101e9988], bl
cmp ecx, 0xc8
jb 0x100286c8
call esi
mov dword [0x101e9984], eax
mov eax, dword [0x101163e4]
sub eax, 0xa
mov dword [0x101163e4], eax
cmp eax, ebx
jg 0x10028711
mov dword [0x101163e4], ebx
mov eax, 0xd8
mov ecx, 0x101e79a8
call fcn.1000fd40
test al, al
je 0x1002877d
cmp byte [0x101163dc], bl
je 0x100286c8
cmp dword [ebp + 8], 0x201
jne 0x1002873e
mov byte [0x101e99d0], 1
jmp 0x100286c8
mov edx, edi
sub edx, dword [0x101e99cc]
mov byte [0x101e99d0], bl
cmp edx, 0xc8
jb 0x100286c8
call esi
mov dword [0x101e99cc], eax
mov eax, dword [0x101163e4]
add eax, 0xa
mov dword [0x101163e4], eax
cmp eax, 0x190
jl 0x1002877d
mov dword [0x101163e4], 0x190
mov eax, 0xc4
mov ecx, 0x101e79a8
call fcn.1000fd40
test al, al
je 0x100287dc
cmp dword [ebp + 8], 0x201
jne 0x100287b5
pop edi
pop esi
mov byte [0x101e9700], 1
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10036e30
mov esp, ebp
pop ebp
ret 4
mov eax, edi
sub eax, dword [0x101e96fc]
mov byte [0x101e9700], bl
cmp eax, 0x1f4
jb 0x100286c8
call esi
xor byte [0x101163dd], 1
mov dword [0x101e96fc], eax
mov eax, 0xc6
mov ecx, 0x101e79a8
call fcn.1000fd40
test al, al
je 0x100288c5
cmp dword [ebp + 8], 0x201
jne 0x10028818
pop edi
pop esi
mov byte [0x101e9748], 1
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10036e30
mov esp, ebp
pop ebp
ret 4
mov ecx, edi
sub ecx, dword [0x101e9744]
mov byte [0x101e9748], bl
cmp ecx, 0x1f4
jb 0x100286c8
call esi
mov cl, byte [0x101163de]
xor cl, 1
mov dword [0x101e9744], eax
mov byte [0x101163de], cl
xor eax, eax
lea ebx, [ebx]
cmp cl, bl
jne 0x1002888d
cmp eax, 4
ja case.default.0x10028892
jmp dword [eax*4 + 0x10028a44]
mov byte [0x101163df], 1
jmp case.default.0x10028892
mov byte [0x101163e0], 1
jmp case.default.0x10028892
mov byte [0x101163e1], 1
jmp case.default.0x10028892
mov byte [0x101163e2], 1
jmp case.default.0x10028892
mov byte [0x101163e3], 1
jmp case.default.0x10028892
cmp eax, 4
ja case.default.0x10028892
jmp dword [eax*4 + 0x10028a58]
mov byte [0x101163df], bl
jmp case.default.0x10028892
mov byte [0x101163e0], bl
jmp case.default.0x10028892
mov byte [0x101163e1], bl
jmp case.default.0x10028892
mov byte [0x101163e2], bl
jmp case.default.0x10028892
mov byte [0x101163e3], bl
inc eax
cmp eax, 7
jl 0x10028850
mov eax, 0xdc
mov ecx, 0x101e79a8
call fcn.1000fd40
test al, al
je 0x10028926
cmp dword [ebp + 8], 0x201
jne 0x100288ed
mov byte [0x101e9a60], 1
jmp 0x100286c8
sub edi, dword [0x101e9a5c]
mov byte [0x101e9a60], bl
cmp edi, 0x1f4
jb 0x100286c8
call esi
mov dword [0x101e9a5c], eax
mov eax, 0x101163d8
call fcn.10029be0
cmp byte [0x101e95e1], 1
setne dl
mov byte [0x101e95e1], dl
mov dword [ebp - 0x18], 0xc8
mov dword [ebp - 0x14], 0xca
mov dword [ebp - 0x10], 0xcc
mov dword [ebp - 0xc], 0xce
mov dword [ebp - 8], 0xd0
xor edi, edi
jmp 0x10028950
mov ax, word [ebp + edi*4 - 0x18]
mov ecx, 0x101e79a8
call fcn.1000fd40
test al, al
je 0x100289e8
mov eax, dword [ebp + edi*4 - 0x18]
lea esi, [eax + eax*8]
mov eax, dword [ebp - 0x1c]
add esi, esi
sub eax, dword [esi + esi + 0x101e7b6c]
add esi, esi
cmp dword [ebp + 8], 0x201
je 0x100289f7
mov byte [esi + 0x101e7b70], bl
cmp eax, 0x1f4
jb 0x100286c8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x101e7b6c], eax
cmp edi, 4
ja case.default.0x100289a7
jmp dword [edi*4 + 0x10028a6c]
xor byte [0x101163df], 1
jmp case.default.0x100289a7
xor byte [0x101163e0], 1
jmp case.default.0x100289a7
xor byte [0x101163e1], 1
jmp case.default.0x100289a7
xor byte [0x101163e2], 1
jmp case.default.0x100289a7
xor byte [0x101163e3], 1
cmp byte [0x101163de], 1
jne 0x100289e8
mov byte [0x101163de], bl
inc edi
cmp edi, 5
jl 0x10028950
jmp 0x100286c8
mov edi, dword [ebp + edi*4 - 0x18]
mov ecx, dword [ebp - 4]
lea eax, [edi + edi*8]
pop edi
pop esi
mov byte [eax*4 + 0x101e7b70], 1
xor ecx, ebp
mov al, 1
pop ebx
call fcn.10036e30
mov esp, ebp
pop ebp
ret 4