Function at 0x1003ccf0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x18
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov eax, dword [edi + 0x14]
cmp dword [eax + 0x597c4], 3
jne 0x1003d4b0
mov ecx, dword [eax + 0x5975c]
xor esi, esi
cmp dword [eax + 0x1d0], esi
mov dword [esp + 0x10], ecx
je 0x1003cd6a
mov eax, dword [0x100bb654]
push esi
push 4
lea edx, [esp + 0x1c]
push edx
push eax
mov dword [esp + 0x24], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [esp + 0x14], esi
je 0x1003cd6a
mov ecx, dword [0x100bb2cc]
mov eax, dword [ecx]
mov edx, dword [eax + 0x98]
push str.SetLootMethod_freeforall__
call edx
lea eax, [esi + 1]
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebp, dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [edi + 0x14]
push 0x64
call ebp
push ebx
call fcn.1001baa0
push 0x32
call ebp
push ebx
call fcn.1001bf50
cmp dword [ebx + 0x59774], esi
ja 0x1003cd97
cmp dword [ebx + 0x5978c], esi
jbe 0x1003cd9f
cmp dword [ebx + 0x1d4], esi
je 0x1003ce1d
mov eax, dword [edi + 0x14]
cmp dword [eax + 0x4dc], esi
jne 0x1003cdb2
cmp dword [eax + 0x4e8], esi
je 0x1003cdc1
lea ecx, [eax + 0xc]
push ecx
mov ecx, dword [eax + 0x5975c]
call fcn.10059620
mov edx, dword [edi + 0x14]
cmp dword [edx + 0x24], 2
jne 0x1003cdf2
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
sub eax, dword [edi + 0x40]
cmp eax, 0xc3500
jbe 0x1003cdf2
mov eax, dword [edi + 0x14]
mov ecx, dword [esp + 0x10]
add eax, 0xc
push eax
push ecx
call fcn.10059c90
call ebx
mov dword [edi + 0x40], eax
mov edi, dword [edi + 0x14]
lea eax, [edi + 0x597d0]
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], 3
call fcn.1001d970
mov dword [eax], esi
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x14]
cmp dword [edx + 0x597c8], 3
je 0x1003ce53
mov ecx, dword [0x100bb2cc]
mov dword [edi + 0x28], esi
mov dword [edi + 0x2c], esi
mov dword [edi + 0x30], 2
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [esp + 0x10]
mov dword [eax + 0xec], esi
mov dword [edi + 0x34], esi
mov dword [edi + 0x44], esi
mov eax, dword [esp + 0x10]
cmp dword [eax + 0x94], esi
jne 0x1003d67e
cmp dword [eax + 0x98], esi
jne 0x1003d67e
cmp dword [edi + 0x34], esi
jne 0x1003ce7a
push edi
call fcn.1003d6a0
mov eax, dword [edi + 0x34]
cmp eax, 1
jne 0x1003d337
mov eax, dword [edi + 0x14]
cmp dword [eax + 0x59774], esi
je 0x1003d687
add eax, 0x5976c
call fcn.10004a40
mov ebx, eax
mov esi, ebx
call fcn.1006f5f0
cmp dword [ebx + 0x84], 0
jne 0x1003d321
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x44]
cmp eax, 0x7d0
jae 0x1003ced2
test dword [ebx + 0x58], 0x4000000
jne 0x1003d687
mov eax, dword [edi + 0x14]
add eax, 0x5b8
push eax
mov ecx, str.GroupCollect
call fcn.10002730
add esp, 4
test al, al
je 0x1003cf03
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push ecx
mov ecx, dword [edi + 0x14]
push ecx
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
cmp dword [edi + 0x2c], 0
jne 0x1003cf38
fld dword [ebx + 0xc]
mov esi, dword [esp + 0x10]
fstp dword [esp + 0x1c]
mov ecx, 3
fld dword [ebx + 8]
mov edx, 0x211
fstp dword [esp + 0x18]
lea eax, [esp + 0x18]
fld dword [ebx + 0x10]
fstp dword [esp + 0x20]
call fcn.10056b10
mov dword [edi + 0x2c], eax
mov eax, dword [edi + 0x2c]
test eax, eax
je 0x1003d687
cmp eax, 2
mov esi, dword [esp + 0x10]
jne 0x1003cf52
push esi
call fcn.10021900
mov ecx, dword [ebx + 4]
mov eax, dword [ebx]
push ecx
push eax
call fcn.1001ba50
test eax, eax
je 0x1003cfcc
mov edx, dword [edi + 0x14]
cmp dword [edx + 0x1d8], 0
je 0x1003cfcc
fld dword [esp + 0x24]
fsub dword [esi + 0x3c]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fcomp dword [0x100a9988]
fnstsw ax
test ah, 5
jp 0x1003cfac
mov ecx, dword [0x100bb2cc]
mov edx, dword [ecx]
mov eax, dword [edx + 0xa8]
push 0x21
call eax
push 0x7d0
call ebp
add dword [edi + 0x28], 3
jmp 0x1003d2f2
mov dword [edi + 0x28], 0
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push ecx
push edx
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
jmp 0x1003d2f2
mov eax, ebx
call fcn.1006f930
test eax, eax
je 0x1003d0ad
call fcn.1007f0d0
test eax, eax
je 0x1003d068
call fcn.100352b0
mov eax, dword [edi + 0x14]
xor ecx, ecx
cmp dword [eax + 0x1c4], ecx
jne 0x1003d018
cmp dword [eax + 0x1c8], ecx
jne 0x1003d018
cmp dword [eax + 0x1cc], ecx
jne 0x1003d018
mov dword [edi + 0x28], ecx
call fcn.10023ff0
push 0x64
call ebp
jmp 0x1003d045
mov dword [edi + 0x30], 3
mov dword [edi + 0x48], ecx
mov dword [edi + 0x28], ecx
call fcn.10023ff0
push 0x5dc
call ebp
mov eax, dword [edi + 0x14]
mov edx, dword [esi]
add eax, 0xc
push eax
mov eax, dword [edx + 0x20]
mov ecx, esi
call eax
test eax, eax
je 0x1003d05c
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push ecx
mov ecx, dword [edi + 0x14]
push ecx
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
add dword [0x100bb2e4], 1
jmp 0x1003d2f2
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [edi + 0x48]
cmp eax, 0x3e8
jbe 0x1003d2f2
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push 0x12c
mov dword [0x100baec8], ecx
mov dword [0x100baecc], eax
mov dword [0x100bb668], 1
call ebp
add dword [edi + 0x28], 1
call esi
mov dword [edi + 0x48], eax
jmp 0x1003d2f2
mov edx, dword [edi + 0x14]
cmp dword [edx + 0x1c4], 0
je 0x1003d121
test dword [ebx + 0x58], 0x4000000
je 0x1003d121
mov eax, dword [ebx]
push ecx
push eax
call fcn.1007e640
add esp, 8
test eax, eax
jne 0x1003d121
call fcn.1007f0d0
test eax, eax
je 0x1003d103
call fcn.100352b0
xor esi, esi
push 0x64
mov dword [edi + 0x30], 3
mov dword [edi + 0x48], esi
call ebp
mov dword [edi + 0x28], esi
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
mov eax, dword [edi + 0x14]
push ecx
push eax
jmp 0x1003d050
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [edi + 0x48]
cmp eax, 0xbb8
jae 0x1003d194
mov dword [edi + 0x30], 2
jmp 0x1003d2f2
mov ecx, dword [edi + 0x14]
cmp dword [ecx + 0x1c8], 0
je 0x1003d1c3
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push ecx
call fcn.1007e640
add esp, 8
cmp eax, 1
jne 0x1003d1c3
call fcn.1007f0d0
test eax, eax
je 0x1003d176
call fcn.100352b0
xor esi, esi
push 0x64
mov dword [edi + 0x30], 3
mov dword [edi + 0x48], esi
call ebp
mov edx, dword [edi + 0x14]
mov dword [edi + 0x28], esi
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push ecx
push edx
jmp 0x1003d050
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [edi + 0x48]
cmp eax, 0x7d0
jae 0x1003d194
mov dword [edi + 0x30], 2
jmp 0x1003d2f2
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push 0x2bc
mov dword [0x100baec8], ecx
mov dword [0x100baecc], eax
mov dword [0x100bb668], 1
call ebp
call esi
add dword [edi + 0x28], 3
mov dword [edi + 0x48], eax
jmp 0x1003d2f2
mov eax, dword [edi + 0x14]
cmp dword [eax + 0x1cc], 0
je 0x1003d25a
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push ecx
call fcn.1007e640
add esp, 8
cmp eax, 2
jne 0x1003d25a
call fcn.1007f0d0
test eax, eax
je 0x1003d20d
call fcn.100352b0
xor esi, esi
push 0x64
mov dword [edi + 0x30], 3
mov dword [edi + 0x48], esi
call ebp
mov dword [edi + 0x28], esi
jmp 0x1003d045
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [edi + 0x48]
cmp eax, 0x7d0
jae 0x1003d22b
mov dword [edi + 0x30], 2
jmp 0x1003d2f2
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push 0x1f4
mov dword [0x100baec8], ecx
mov dword [0x100baecc], eax
mov dword [0x100bb668], 1
call ebp
call esi
add dword [edi + 0x28], 3
mov dword [edi + 0x48], eax
jmp 0x1003d2f2
mov eax, ebx
call fcn.1006f930
test eax, eax
jne 0x1003d2f2
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push ecx
call fcn.1007e640
add esp, 8
cmp eax, 1
jne 0x1003d289
mov edx, dword [edi + 0x14]
cmp dword [edx + 0x1c8], 0
jne 0x1003d2c7
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push ecx
call fcn.1007e640
add esp, 8
cmp eax, 2
jne 0x1003d2a9
mov eax, dword [edi + 0x14]
cmp dword [eax + 0x1cc], 0
jne 0x1003d2c7
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push ecx
call fcn.1007e640
add esp, 8
test eax, eax
jne 0x1003d2cd
mov ecx, dword [edi + 0x14]
cmp dword [ecx + 0x1c4], eax
je 0x1003d2cd
add dword [edi + 0x28], 3
jmp 0x1003d2f2
mov edx, dword [edi + 0x14]
mov dword [edi + 0x28], 0
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push ecx
push edx
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
mov dword [edi + 0x28], 0
cmp dword [edi + 0x30], 5
je 0x1003d687
push 0x64
call ebp
cmp dword [edi + 0x28], 0xc
jbe 0x1003d687
mov dword [edi + 0x30], 3
mov eax, dword [ebx + 4]
mov ebx, dword [ebx]
push eax
mov eax, dword [edi + 0x14]
push ebx
push eax
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, 2
jne 0x1003d687
mov eax, dword [edi + 0x14]
cmp dword [eax + 0x5978c], esi
je 0x1003d687
mov ecx, dword [eax + 0x59788]
mov ebx, dword [ecx]
cmp ebx, ecx
jne 0x1003d360
call fcn.10080d40
add ebx, 8
call fcn.100356c0
cmp dword [ebx + 0x2c], esi
je 0x1003d394
mov esi, edi
call fcn.1003d8f0
mov eax, dword [ebx + 4]
mov ebx, dword [ebx + 8]
mov edx, dword [edi + 0x14]
push ebx
push eax
push edx
call fcn.1001b9e0
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [edi + 0x2c], esi
jne 0x1003d3ca
fld dword [ebx + 0x10]
mov esi, dword [esp + 0x10]
fstp dword [esp + 0x1c]
mov ecx, 2
fld dword [ebx + 0xc]
mov edx, 0x211
fstp dword [esp + 0x18]
lea eax, [esp + 0x18]
fld dword [ebx + 0x14]
fstp dword [esp + 0x20]
call fcn.10056b10
mov dword [edi + 0x2c], eax
xor esi, esi
mov eax, dword [edi + 0x2c]
cmp eax, esi
je 0x1003d687
cmp eax, 2
jne 0x1003d3e4
mov eax, dword [esp + 0x10]
push eax
call fcn.10021900
cmp dword [edi + 0x30], esi
jne 0x1003d40e
mov ecx, dword [esp + 0x10]
fld dword [ecx + 0x3c]
push ecx
fadd qword [0x100a9980]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fstp dword [esp]
call fcn.10021920
push 0xc8
call ebp
call fcn.1007f0d0
test eax, eax
je 0x1003d46c
mov edx, dword [ebx + 8]
and edx, 0xfffff
cmp edx, 0x2d350
jne 0x1003d437
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
push eax
push ecx
call fcn.10035410
jmp 0x1003d43c
call fcn.100352b0
xor esi, esi
push 0x64
mov dword [edi + 0x30], 3
mov dword [edi + 0x48], esi
call ebp
mov edx, dword [edi + 0x14]
mov dword [edi + 0x28], esi
mov ecx, dword [ebx + 8]
mov eax, dword [ebx + 4]
push ecx
push eax
push edx
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
jmp 0x1003d51b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x48]
cmp eax, 0xbb8
jae 0x1003d488
mov dword [edi + 0x30], 2
jmp 0x1003d51b
mov esi, dword [ebx + 8]
mov eax, esi
and eax, 0xfffff
call fcn.10016640
test eax, eax
je 0x1003d4f8
call fcn.1007f200
test eax, eax
je 0x1003d4bc
call fcn.10035740
push 0x3e8
call ebp
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 8]
mov eax, dword [ebx + 4]
push ecx
push eax
call fcn.1007fbd0
add esp, 8
test eax, eax
je 0x1003d51b
mov eax, dword [ebx + 4]
mov ecx, dword [ebx + 8]
mov esi, 1
push 0x3e8
mov dword [0x100baec8], eax
mov dword [0x100baecc], ecx
mov dword [0x100bb668], esi
call ebp
add dword [edi + 0x28], esi
jmp 0x1003d51b
mov eax, dword [ebx + 4]
push 0x3e8
mov dword [0x100baec8], eax
mov dword [0x100baecc], esi
mov dword [0x100bb668], 1
call ebp
add dword [edi + 0x28], 1
mov eax, dword [ebx + 8]
and eax, 0xfffff
call fcn.10016620
test eax, eax
je 0x1003d551
cmp dword [edi + 0x28], 1
jbe 0x1003d551
mov dword [edi + 0x28], 0
mov ecx, dword [ebx + 8]
mov eax, dword [ebx + 4]
push ecx
push eax
mov eax, dword [edi + 0x14]
push eax
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
mov esi, dword [ebx + 8]
mov eax, esi
and eax, 0xfffff
call fcn.10016640
test eax, eax
je 0x1003d590
mov eax, dword [ebx + 4]
push esi
push eax
call fcn.1007fbd0
add esp, 8
test eax, eax
jne 0x1003d590
mov dword [edi + 0x28], eax
mov ecx, dword [ebx + 8]
mov eax, dword [ebx + 4]
push ecx
mov ecx, dword [edi + 0x14]
push eax
push ecx
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
mov eax, dword [ebx + 8]
mov edx, eax
and edx, 0xfffff
cmp edx, 0x2cf64
jne 0x1003d5a9
cmp dword [edi + 0x28], 1
ja 0x1003d5ba
mov ecx, dword [ebx + 4]
push eax
push ecx
call fcn.1007fbd0
add esp, 8
test eax, eax
jne 0x1003d5e6
mov dword [edi + 0x28], 0
mov ecx, dword [ebx + 8]
mov eax, dword [ebx + 4]
push ecx
push eax
mov eax, dword [edi + 0x14]
push eax
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
mov ecx, dword [edi + 0x14]
mov dword [ecx + 0xb2980], 1
mov esi, dword [ebx + 8]
mov eax, esi
and eax, 0xfffff
call fcn.100165f0
test eax, eax
je 0x1003d5ff
cmp dword [edi + 0x28], 1
ja 0x1003d610
mov eax, dword [ebx + 4]
push esi
push eax
call fcn.1007fbd0
add esp, 8
test eax, eax
jne 0x1003d63c
mov edx, dword [edi + 0x14]
mov dword [edi + 0x28], 0
mov ecx, dword [ebx + 8]
mov eax, dword [ebx + 4]
push ecx
push eax
push edx
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
mov eax, dword [edi + 0x14]
mov dword [eax + 0xb297c], 1
cmp dword [edi + 0x28], 8
jbe 0x1003d668
mov ecx, dword [edi + 0x14]
mov dword [edi + 0x28], 0
mov dword [edi + 0x30], 3
mov eax, dword [ebx + 4]
mov ebx, dword [ebx + 8]
push ebx
push eax
push ecx
call fcn.1001b9e0
mov esi, edi
call fcn.1003d8f0
mov dword [edi + 0x34], 0
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi + 0x38], eax
pop edi
mov eax, 1
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret 4