Function at 0x1001b250
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
xor ebx, ebx
cmp dword [0x10080020], ebx
je 0x1001b266
call fcn.1002a900
cmp dword [0x1007f674], ebx
je 0x1001b2a1
cmp dword [0x1007f578], ebx
je 0x1001b2a1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1007f580]
mov edx, dword [0x1007f94c]
add ecx, edx
cmp ecx, eax
jae 0x1001bbbb
mov dword [0x1007f94c], eax
call fcn.1002a8e0
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1007ffbc], ebx
je 0x1001b2b3
call fcn.100028e0
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x10080014], ebx
push esi
je 0x1001b41c
cmp dword [0x10080024], ebx
jne 0x1001b41c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1007f948]
add ecx, 0x12c
cmp ecx, eax
jae case.default.0x1001b392
mov edx, dword [0x10080018]
push edx
mov dword [0x1007f948], eax
call fcn.10025e70
mov ecx, dword [0x482a48]
lea eax, [ebp - 0x10]
push eax
push ecx
call fcn.10001220
mov eax, dword [ebp - 0x10]
cmp eax, dword [0x1007f940]
mov ecx, dword [ebp - 0xc]
jne 0x1001b405
cmp ecx, dword [0x1007f944]
jne 0x1001b405
cmp dword [0x1008002c], 1
jbe case.default.0x1001b392
push 4
push 0x482a10
mov dword [0x1008002c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], 0x482a10
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1001b36c
mov eax, dword [ebp - 8]
mov esi, dword ds:[eax]
mov eax, dword ds:[esi]
mov ecx, dword ds:[eax + 0x5c]
mov edx, dword ds:[ecx + 0x14]
add edx, esi
mov ecx, dword ds:[edx]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov esi, dword [ebp - 0x10]
mov eax, edx
sub eax, ecx
sub ecx, edx
mov edx, dword [0x10080028]
add eax, esi
add ecx, esi
shr eax, 1
shr ecx, 1
cmp edx, 7
ja case.default.0x1001b392
jmp dword [edx*4 + 0x1001bbc0]
add ecx, 0x28
push ecx
push eax
call fcn.10019920
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add ecx, 0xffffffd8
push ecx
push eax
call fcn.10019920
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add ecx, 0xffffffd8
push ecx
add eax, 0xffffffd8
push eax
call fcn.10019920
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add ecx, 0xffffffd8
push ecx
add eax, 0x28
push eax
call fcn.10019920
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add ecx, 0x28
push ecx
add eax, 0x28
push eax
call fcn.10019920
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add ecx, 0x28
push ecx
add eax, 0xffffffd8
push eax
call fcn.10019920
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop esi
mov dword [0x1008002c], ebx
mov dword [0x1007f940], eax
mov dword [0x1007f944], ecx
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1008003c], ebx
je 0x1001b4d5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x10080030]
mov esi, dword [0x1007f93c]
mov edx, ecx
imul edx, edx, 0x7d0
lea edx, [edx + esi + 0x3e8]
cmp edx, eax
jae case.default.0x1001b392
cmp ecx, ebx
mov dword [0x1007f93c], eax
jne 0x1001b48f
mov eax, dword [0x10080038]
cmp eax, dword [0x10080034]
ja case.default.0x1001b392
push 0x9ce
call fcn.10025e20
test eax, eax
jne case.default.0x1001b392
add dword [0x10080038], 1
call fcn.1001b150
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x9ce
call fcn.10025e20
test eax, eax
jne 0x1001b4c5
push ebx
call fcn.10021da0
push 0xa8
call fcn.1002df80
test eax, eax
je case.default.0x1001b392
push 0x9ce
call fcn.1002c8f0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x9ce
call fcn.10025e70
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x10080040], ebx
je 0x1001b507
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1007f938]
add ecx, 0x3e8
cmp ecx, eax
jae case.default.0x1001b392
mov dword [0x1007f938], eax
call fcn.10003da0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x10080050], ebx
je 0x1001b539
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x1007f934]
add edx, 0x1f4
cmp edx, eax
jae case.default.0x1001b392
mov dword [0x1007f934], eax
call fcn.10004190
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x10080064], ebx
je 0x1001b568
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1007f930]
add ecx, 0x64
cmp ecx, eax
jae case.default.0x1001b392
mov dword [0x1007f930], eax
call fcn.10004700
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1008001c], ebx
push edi
je 0x1001b619
push 1
push 2
push 0x10050a78
call fcn.10023a20
mov edi, eax
cmp edi, ebx
je case.default.0x1001b8b5
xor esi, esi
nop
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x1001b595
sub eax, edx
mov edx, dword [esi*8 + 0x1004ea80]
push eax
push edx
push edi
call fcn.1002e642
add esp, 0xc
test eax, eax
je 0x1001b5c3
add esi, 1
cmp esi, 0x3d1
jl 0x1001b590
jmp 0x1001b5d8
mov eax, dword [esi*8 + 0x1004ea84]
push eax
call fcn.10024370
test eax, eax
jne case.default.0x1001b8b5
push 1
push 7
push 0x10050a78
call fcn.10023b40
test eax, eax
jne case.default.0x1001b8b5
push 1
push 8
push 0x10050a78
call fcn.10023b40
test eax, eax
jne case.default.0x1001b8b5
push 1
push 9
push 0x10050a78
call fcn.10023b40
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1007f67c], ebx
je 0x1001b728
push 0x10042f10
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 8], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1007f92c]
add ecx, 0x12c
cmp ecx, eax
jae case.default.0x1001b8b5
cmp dword [0x1007f894], ebx
mov dword [0x1007f92c], eax
jne 0x1001b66c
mov edx, dword [0x1007fdbc]
mov eax, dword [edx*4 + 0x10075148]
jmp 0x1001b779
cmp dword [0x1007f928], ebx
jne 0x1001b68a
call fcn.1002aa20
pop edi
pop esi
mov dword [0x1007f928], 1
pop ebx
mov esp, ebp
pop ebp
ret
push ebx
push 0x10050a70
push 0x10050a68
call fcn.10024680
test eax, eax
je 0x1001b6bd
push 1
push 0x10050a5c
mov dword [0x1007f894], ebx
call fcn.10001160
pop edi
pop esi
mov dword [0x1007f928], ebx
pop ebx
mov esp, ebp
pop ebp
ret
push 6
push 1
push 0x10050a68
call fcn.10023aa0
test eax, eax
jne 0x1001b6d3
push 1
jmp 0x1001b70f
push 6
push 3
push 0x10050a68
call fcn.10023aa0
test eax, eax
jne 0x1001b6e9
push 2
jmp 0x1001b70f
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 8]
mov eax, dword ds:[eax + 0x54fc8]
test eax, eax
je 0x1001b704
mov eax, dword ds:[eax + 0x226]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x3c3e7262
je 0x1001b71b
push 3
push 8
push 0x10050a68
call fcn.10023b40
pop edi
pop esi
mov dword [0x1007f928], ebx
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1007f680], ebx
je 0x1001b84c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1007f924]
mov esi, eax
add ecx, 0x12c
cmp ecx, esi
jae case.default.0x1001b8b5
push 0x10042f10
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp dword [0x1007f894], ebx
mov dword [ebp - 8], eax
mov dword [0x1007f924], esi
jne 0x1001b790
mov edx, dword [0x1007fdc0]
mov eax, dword [edx*4 + 0x1007497c]
push eax
call fcn.10025e70
pop edi
pop esi
mov dword [0x1007f894], 1
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1007f920], ebx
jne 0x1001b7ae
call fcn.1002aa80
pop edi
pop esi
mov dword [0x1007f920], 1
pop ebx
mov esp, ebp
pop ebp
ret
push ebx
push 0x10050a54
push 0x10050a4c
call fcn.10024680
test eax, eax
je 0x1001b7e1
push 1
push 0x10050a40
mov dword [0x1007f894], ebx
call fcn.10001160
pop edi
pop esi
mov dword [0x1007f920], ebx
pop ebx
mov esp, ebp
pop ebp
ret
push 6
push 1
push 0x10050a4c
call fcn.10023aa0
test eax, eax
jne 0x1001b7f7
push 1
jmp 0x1001b833
push 6
push 3
push 0x10050a4c
call fcn.10023aa0
test eax, eax
jne 0x1001b80d
push 2
jmp 0x1001b833
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 8]
mov eax, dword ds:[eax + 0x54fc8]
test eax, eax
je 0x1001b828
mov eax, dword ds:[eax + 0x226]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x3c3e7262
je 0x1001b83f
push 3
push 8
push 0x10050a4c
call fcn.10023b40
pop edi
pop esi
mov dword [0x1007f920], ebx
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1007f684], ebx
je 0x1001bb36
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1007f91c]
add ecx, 0x32
cmp ecx, eax
jae case.default.0x1001b8b5
cmp dword [0x1007f894], ebx
mov dword [0x1007f91c], eax
jne 0x1001b8a2
xor eax, eax
mov edi, 1
mov dword [0x1007f918], eax
mov dword [0x1007f914], ebx
mov dword [0x1007f910], ebx
mov dword [0x1007f90c], ebx
mov dword [0x1007f894], edi
jmp switch.0x1001b8b5
mov eax, dword [0x1007f918]
cmp eax, 0xb
ja case.default.0x1001b8b5
mov edi, 1
jmp dword [eax*4 + 0x1001bbe0]
push 0xfa1
call fcn.10025e20
cmp eax, 0xa
jae 0x1001b9de
push 0xed70
call fcn.10025e20
test eax, eax
jbe 0x1001b8ec
push 0xed70
call fcn.10025e70
jmp 0x1001b9de
push 0x179
push 0xc3
call fcn.100198f0
mov dword [0x1007f918], edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 6
call fcn.100195c0
test eax, eax
je case.default.0x1001b8b5
call fcn.1002aa60
pop edi
pop esi
mov dword [0x1007f918], 3
pop ebx
mov esp, ebp
pop ebp
ret
push 7
call fcn.100195c0
test eax, eax
je case.default.0x1001b8b5
call fcn.1002aa40
pop edi
pop esi
mov dword [0x1007f918], 4
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [0x1007f9d8]
mov eax, dword [edx]
lea ecx, [eax - 1]
cmp ecx, 0xfffe
mov dword [0x1007f90c], eax
ja case.default.0x1001b8b5
mov esi, 0x14
jmp 0x1001b985
mov eax, dword [0x1007f90c]
push 0x190
push 0xfa1
push eax
call fcn.1001aa50
call fcn.1001ae50
call fcn.1001ae50
call fcn.1001ae50
call fcn.1001ae50
call fcn.1001ae50
call fcn.1001ae50
call fcn.1001ae50
call fcn.1001ae50
call fcn.1001ae50
call fcn.1001ae50
sub esi, edi
jne 0x1001b980
mov edx, dword [0x1007f90c]
push 0x28
push 0xfa1
push edx
call fcn.1001aa50
push 0x165
push 0xd6
call fcn.100198f0
pop edi
pop esi
mov dword [0x1007f918], 2
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x1007f9d8]
mov eax, dword [eax]
lea ecx, [eax - 1]
cmp ecx, 0xfffe
mov dword [0x1007f90c], eax
ja case.default.0x1001b8b5
push edi
push 0x3a2
push eax
call fcn.1001aa50
pop edi
pop esi
mov dword [0x1007f918], 5
pop ebx
mov esp, ebp
pop ebp
ret
push 0x3a2
call fcn.1002c130
cmp eax, ebx
mov dword [0x1007f910], eax
je case.default.0x1001b8b5
cmp dword [0x1007f914], ebx
jne 0x1001ba68
push eax
call fcn.1001abf0
mov dword [0x1007f914], edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.1001ac30
add dword [0x1007f918], edi
add dword [0x1007f908], 2
pop edi
pop esi
mov dword [0x1007f914], ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [0x1007f910]
mov eax, dword [edx + 8]
mov ecx, dword [0x1007f90c]
push eax
push ecx
call fcn.1001ab10
push 4
call fcn.10001020
push eax
call fcn.1001aa10
push 0x3ed
mov esi, eax
call fcn.10001020
cmp esi, eax
jae 0x1001baca
push edi
push 0x10050a38
call fcn.10001160
call fcn.1001ae00
cmp dword [0x1007f908], 0x2c
jbe 0x1001baef
call fcn.1001ada0
pop edi
pop esi
mov dword [0x1007f908], ebx
mov dword [0x1007f918], 9
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov dword [0x1007f918], 0xb
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.1001aca0
add dword [0x1007f918], edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x3a2
call fcn.1002c130
cmp eax, ebx
mov dword [0x1007f910], eax
jne case.default.0x1001b8b5
pop edi
pop esi
mov dword [0x1007f918], ebx
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1007f688], ebx
je 0x1001bb94
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x1007f904]
add edx, 0x3e8
cmp edx, eax
jae case.default.0x1001b8b5
cmp dword [0x1007f7fc], ebx
mov dword [0x1007f904], eax
je case.default.0x1001b8b5
call fcn.10027220
test eax, eax
je case.default.0x1001b8b5
mov ecx, dword [0x1007f7fc]
lea eax, [ebp - 0x10]
push eax
push ecx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
call fcn.10001220
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
push edx
push eax
call fcn.1002c930
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1007f89c], ebx
je case.default.0x1001b8b5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1007f900]
add ecx, 0x32
cmp ecx, eax
jae case.default.0x1001b8b5
mov dword [0x1007f900], eax
call fcn.1001afd0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret