Function at 0x100646a0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x100b44b0
push 0x1007ebcd
mov eax, dword fs:[0]
push eax
sub esp, 0x20
mov eax, dword [0x100b700c]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp dword [0x100ba8d4], eax
ja 0x10064745
mov eax, dword [0x100bf600]
inc eax
mov dword [0x100bf600], eax
cmp eax, 0x3d
jne 0x10064720
mov dword [0x100bf600], 0
mov eax, dword [0x100c00dc]
inc eax
mov dword [0x100c00dc], eax
cmp eax, 0x3d
jne 0x10064720
inc dword [0x100bf598]
mov dword [0x100c00dc], 0
sub dword [0x100b701c], 1
jne 0x10064739
mov dword [0x100b701c], 0x3c
dec dword [0x100b783c]
call esi
add eax, 0x3e8
mov dword [0x100ba8d4], eax
call fcn.1001a9a0
mov esi, eax
mov ecx, esi
call fcn.10078050
push dword [0x100bf600]
push dword [0x100c00dc]
push dword [0x100bf598]
push esi
push 0x100be940
call fcn.10008c80
add esp, 0x14
wait
mov dword [ebp - 4], 0
mov ecx, dword [0x100befd8]
mov eax, dword [ecx]
push dword [0x100bab50]
call dword [eax + 4]
mov eax, dword [eax]
mov dword [0x100c083c], eax
call fcn.1001b580
mov dword [0x100c0420], eax
mov eax, dword [0x100bab50]
mov ecx, dword [eax + 0x294]
mov eax, dword [0x100c083c]
mov edi, dword [eax + ecx]
test edi, edi
je 0x10064a72
mov eax, dword [edi]
push 0x100befbc
push edi
call dword [eax + 0xc0]
add dword [0x100b7ea4], 2
add dword [0x100b7c9c], 3
add dword [0x100b7c50], 4
call fcn.1001ad70
call fcn.1002cc20
cmp dword [0x100b7018], 0
je 0x1006485c
mov byte [ebp - 0x2d], 0
call fcn.10064ab0
mov esi, eax
mov ecx, esi
call fcn.10068e10
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
push dword [eax]
push dword [eax + 4]
push dword [eax + 8]
push esi
push 0x100bf740
call fcn.10008c80
add esp, 0x1c
call fcn.1002c450
mov byte [ebp - 0x2e], 0
call fcn.10064b90
mov esi, eax
mov ecx, esi
call fcn.10068db0
mov edx, esi
call fcn.1002c980
call fcn.1002c9f0
call fcn.1002c560
call fcn.1002c6c0
call fcn.1002c820
mov ecx, dword [0x100befd8]
mov eax, dword [ecx]
call dword [eax + 0xa8]
test eax, eax
je 0x10064a72
mov ecx, edi
call fcn.100637b0
call fcn.10017050
test eax, eax
je 0x1006488a
push edi
call fcn.100642f0
jmp 0x100648b1
call fcn.100173b0
test eax, eax
je 0x1006489b
push edi
call fcn.100643c0
jmp 0x100648b1
call fcn.10017170
push edi
test eax, eax
je 0x100648ac
call fcn.10064350
jmp 0x100648b1
call fcn.10064280
cmp dword [0x100b7018], 0
je 0x1006492f
cmp dword [0x100ba790], 0
je 0x1006492f
mov edx, 1
lea ecx, [edx + 0x10]
call fcn.10017910
test eax, eax
je 0x1006492f
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x24]
mov dword [0x100b742c], ecx
mov eax, dword [ebp - 0x20]
add eax, 2
mov dword [0x100b7c4c], eax
mov dword [0x100b87f8], ecx
mov dword [0x100b8734], eax
mov dword [0x100b89c4], ecx
mov dword [0x100b80cc], eax
mov dword [0x100b85f8], ecx
mov dword [0x100b8100], eax
mov dword [0x100b8104], ecx
mov dword [0x100b80b0], eax
call fcn.10028300
call fcn.100173b0
mov ecx, edi
test eax, eax
je 0x10064946
call fcn.1002c2b0
jmp 0x1006494b
call fcn.1002c070
cmp dword [0x100c0138], 0
jne 0x10064a72
cmp dword [0x100b7018], 1
jne 0x1006498e
cmp dword [0x100c3cec], 0
jne 0x1006498e
xor edx, edx
lea ecx, [edx + 0x2e]
call fcn.10017910
test al, 1
je 0x1006498e
mov dword [0x100c3cec], 1
mov dword [0x100b7018], 0
jmp 0x10064997
cmp dword [0x100b7018], 0
jne 0x100649c4
cmp dword [0x100c3cec], 1
jne 0x100649c4
xor edx, edx
lea ecx, [edx + 0x2e]
call fcn.10017910
test al, 1
je 0x100649c4
mov dword [0x100c3cec], 0
mov dword [0x100b7018], 1
jmp 0x100649cd
cmp dword [0x100b7018], 1
jne 0x10064a1c
cmp dword [0x100c3cec], 0
jne 0x10064a1c
mov edx, 1
lea ecx, [edx + 0x10]
call fcn.10017910
test eax, eax
je 0x10064a1c
mov edx, 1
lea ecx, [edx + 0x43]
call fcn.10017910
test eax, eax
je 0x10064a1c
xor edx, edx
lea ecx, [edx + 0x30]
call fcn.10017910
test eax, eax
je 0x10064a1c
mov dword [0x100c3cec], 2
mov dword [0x100b7018], 0
jmp 0x10064a25
cmp dword [0x100b7018], 0
jne 0x10064a72
cmp dword [0x100c3cec], 2
jne 0x10064a72
mov edx, 1
lea ecx, [edx + 0x10]
call fcn.10017910
test eax, eax
je 0x10064a72
mov edx, 1
lea ecx, [edx + 0x43]
call fcn.10017910
test eax, eax
je 0x10064a72
xor edx, edx
lea ecx, [edx + 0x30]
call fcn.10017910
test eax, eax
je 0x10064a72
mov dword [0x100c3cec], 0
mov dword [0x100b7018], 1
wait
jmp 0x10064a7e
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.1007ea19
mov esp, ebp
pop ebp
ret