Function at 0x1000fd00
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3034
call fcn.10055700
mov eax, dword [0x1006d258]
xor eax, ebp
mov dword [ebp - 0xc], eax
push esi
push 0x1000
push 0
lea eax, [ebp - 0x1010]
push eax
call fcn.1004e3d0
add esp, 0xc
mov dword [ebp - 0x1014], 0
mov dword [ebp - 8], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1018], eax
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x1018]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp + 0xc]
jae 0x1001016f
mov edx, dword [ebp - 0x1014]
lea eax, [ebp + edx - 0x1010]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.1002c630
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jle 0x1000fd9c
mov edx, dword [ebp - 0x1014]
add edx, dword [ebp - 8]
mov dword [ebp - 0x1014], edx
cmp dword [ebp - 0x1014], 0
jle 0x10010162
cmp dword [ebp - 0x1014], 6
jl 0x1000ff08
movzx eax, byte [ebp - 0x100f]
cmp eax, 0xb1
jne 0x1000ff01
movzx ecx, byte [ebp - 0x100c]
cmp ecx, 3
jne 0x1000ff01
movzx esi, byte [ebp - 0x100b]
push 4
lea edx, [ebp - 0x100f]
push edx
call fcn.10011110
movzx eax, al
cmp esi, eax
jne 0x1000ff01
cmp dword [0x10073498], 0x1000
jb 0x1000fe0e
mov dword [0x10073498], 0
mov ecx, dword [0x10073498]
imul ecx, ecx, 6
add ecx, 0x100734b8
mov edx, dword [ebp - 0x1010]
mov dword [ecx], edx
mov ax, word [ebp - 0x100c]
mov word [ecx + 4], ax
movzx ecx, byte [ebp - 0x100e]
mov edx, dword [0x100894b8]
mov dword [edx*4 + 0x100794b8], ecx
movzx eax, byte [ebp - 0x100d]
mov ecx, dword [0x100894b8]
mov dword [ecx*4 + 0x100814b8], eax
mov edx, dword [0x100894b8]
add edx, 1
mov dword [0x100894b8], edx
mov eax, dword [0x10073498]
add eax, 1
mov dword [0x10073498], eax
mov ecx, dword [ebp - 0x1014]
sub ecx, 6
mov dword [ebp - 0x1014], ecx
push 0x1000
push 0
lea edx, [ebp - 0x2020]
push edx
call fcn.1004e3d0
add esp, 0xc
mov eax, dword [ebp - 0x1014]
push eax
lea ecx, [ebp - 0x100a]
push ecx
lea edx, [ebp - 0x2020]
push edx
call fcn.1004ec60
add esp, 0xc
push 0x1000
push 0
lea eax, [ebp - 0x1010]
push eax
call fcn.1004e3d0
add esp, 0xc
mov ecx, dword [ebp - 0x1014]
push ecx
lea edx, [ebp - 0x2020]
push edx
lea eax, [ebp - 0x1010]
push eax
call fcn.1004ec60
add esp, 0xc
push 0x1000
push 0
lea ecx, [ebp - 0x2020]
push ecx
call fcn.1004e3d0
add esp, 0xc
jmp 0x1000ff03
jmp 0x1000ff08
jmp 0x1000fda9
cmp dword [ebp - 0x1014], 1
jne 0x1000ff70
movzx edx, byte [ebp - 0x1010]
cmp edx, 6
je 0x1000ff29
movzx eax, byte [ebp - 0x1010]
cmp eax, 0x15
jne 0x1000ff70
mov ecx, dword [ebp + 0x10]
mov dl, byte [ebp - 0x1010]
mov byte [ecx], dl
mov eax, dword [ebp - 0x1014]
push eax
lea ecx, [ebp - 0x1010]
push ecx
mov edx, dword [ebp + 0x14]
push edx
call fcn.1004ec60
add esp, 0xc
mov eax, dword [ebp - 0x1014]
sub eax, 1
mov dword [ebp - 0x1014], eax
mov ecx, dword [ebp - 0x1014]
mov byte [ebp + ecx - 0x1010], 0
jmp 0x1000fd52
cmp dword [ebp - 0x1014], 6
jge 0x1000ff7e
jmp 0x1000fd52
cmp dword [ebp - 0x1014], 8
jne 0x1000ffbb
movzx edx, byte [ebp - 0x100d]
cmp edx, 0xa0
jne 0x1000ffbb
mov dword [ebp - 0x1014], 0
push 0x1000
push 0
lea eax, [ebp - 0x1010]
push eax
call fcn.1004e3d0
add esp, 0xc
jmp 0x1000fd52
cmp dword [ebp - 0x1014], 8
jne 0x1000ffe4
movzx ecx, byte [ebp - 0x100b]
cmp ecx, 0x39
jne 0x1000ffe4
push 0x10004
push 0
push 0x100794b8
call fcn.1004e3d0
add esp, 0xc
mov edx, dword [ebp - 0x1014]
push edx
lea eax, [ebp - 0x1010]
push eax
call fcn.10011df0
mov dword [ebp - 0x101c], eax
cmp dword [ebp - 0x101c], 0
je 0x10010013
cmp dword [ebp - 0x101c], 3
jne 0x10010121
xor ecx, ecx
mov dword [ebp - 0x2028], ecx
mov byte [ebp - 0x2024], cl
mov edx, dword [ebp - 0x100f]
mov dword [ebp - 0x2028], edx
lea eax, [ebp - 0x2028]
push eax
call fcn.100481ab
add esp, 4
add eax, 6
mov dword [ebp - 0x202c], eax
mov ecx, dword [ebp - 0x202c]
push ecx
lea edx, [ebp - 0x1010]
push edx
mov eax, dword [ebp + 0x14]
push eax
call fcn.1004ec60
add esp, 0xc
cmp dword [ebp - 0x202c], 8
jbe 0x10010075
mov ecx, dword [ebp + 0x10]
mov byte [ecx], 0
jmp 0x1001016f
cmp dword [ebp - 0x202c], 8
jne 0x1001008e
mov edx, dword [ebp + 0x10]
mov al, byte [ebp - 0x100b]
mov byte [edx], al
jmp 0x1001016f
cmp dword [ebp - 0x101c], 3
jne 0x1001011f
mov ecx, dword [ebp - 0x1014]
sub ecx, dword [ebp - 0x202c]
mov dword [ebp - 0x1014], ecx
push 0x1000
push 0
lea edx, [ebp - 0x3030]
push edx
call fcn.1004e3d0
add esp, 0xc
mov eax, dword [ebp - 0x1014]
push eax
mov ecx, dword [ebp - 0x202c]
lea edx, [ebp + ecx - 0x1010]
push edx
lea eax, [ebp - 0x3030]
push eax
call fcn.1004ec60
add esp, 0xc
push 0x1000
push 0
lea ecx, [ebp - 0x1010]
push ecx
call fcn.1004e3d0
add esp, 0xc
mov edx, dword [ebp - 0x1014]
push edx
lea eax, [ebp - 0x3030]
push eax
lea ecx, [ebp - 0x1010]
push ecx
call fcn.1004ec60
add esp, 0xc
jmp 0x1000fd52
jmp 0x10010162
cmp dword [ebp - 0x101c], 2
jne 0x10010131
jmp 0x1000fd52
mov edx, dword [ebp - 0x101c]
not edx
add edx, 1
mov dword [ebp - 0x3034], edx
push 0x1000
push 0
lea eax, [ebp - 0x1010]
push eax
call fcn.1004e3d0
add esp, 0xc
mov dword [ebp - 0x1014], 0
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1000fd52
push 0x1000
push 0
lea ecx, [ebp - 0x1010]
push ecx
call fcn.1004e3d0
add esp, 0xc
mov edx, dword [ebp - 4]
cmp edx, dword [ebp + 0xc]
jbe 0x10010194
mov eax, 0xfffffa4c
jmp 0x1001019a
mov eax, dword [ebp - 0x1014]
pop esi
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10048168
mov esp, ebp
pop ebp
ret 0x10