Function at 0x10021e6a
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
push ebx
mov dword [ebp - 0x70], ecx
mov eax, dword [ebp - 0x70]
cmp dword [eax + 8], 0
je 0x10021e95
push str.Mode_thread_started.
push 5
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx + 8]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov eax, dword [ebp - 0x70]
mov dword [eax + 0x10e38], 1
mov byte [ebp - 0xa], 0xfe
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 0x10e24]
or dl, 0x80
mov byte [ebp - 9], dl
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e24], 5
je 0x10021f15
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x10e24], 6
je 0x10021f15
mov edx, dword [ebp - 0x70]
cmp dword [edx + 0x10e24], 8
je 0x10021f15
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e24], 9
je 0x10021f15
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x10e24], 0xc
je 0x10021f15
mov edx, dword [ebp - 0x70]
cmp dword [edx + 0x10e24], 0xd
je 0x10021f15
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e24], 0xf
je 0x10021f15
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x10e24], 0x11
jne 0x10021f23
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10e3c]
mov dword [ebp - 0x10], eax
jmp 0x10021f2a
mov dword [ebp - 0x10], 0
mov word [ebp - 0xc], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x14], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 0x10e34]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x10021f8a
mov eax, dword [ebp - 0x70]
cmp dword [eax + 8], 0
je 0x10021f85
push 0x10041f88
push 5
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx + 8]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 8]
mov edx, dword [eax]
call dword [edx + 0x14]
jmp 0x1002286e
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e20], 0
jne 0x1002212c
push 1
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 0x10e48]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x10022127
mov eax, dword [ebp - 0x70]
cmp dword [eax + 8], 0
je 0x10021fd5
push str.UART_boot_mode_data_received.
push 5
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx + 8]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 0x10e48]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, dword [ebp - 0x70]
cmp dword [edx + 0x10e24], 5
je 0x10022049
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e24], 6
je 0x10022049
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x10e24], 8
je 0x10022049
mov edx, dword [ebp - 0x70]
cmp dword [edx + 0x10e24], 9
je 0x10022049
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e24], 0xc
je 0x10022049
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x10e24], 0xd
je 0x10022049
mov edx, dword [ebp - 0x70]
cmp dword [edx + 0x10e24], 0xf
je 0x10022049
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e24], 0x11
jne 0x100220d6
mov ecx, dword [ebp - 0x70]
xor edx, edx
mov dl, byte [ecx + 0xb9d]
test edx, edx
jne 0x100220d6
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 0x10e3c]
shr ecx, 0x10
and ecx, 0xffff
and ecx, 0xffff
sar ecx, 8
and ecx, 0xff
and ecx, 0xff
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10e3c]
shr eax, 0x10
and eax, 0xffff
and eax, 0xff
shl eax, 8
or ecx, eax
and ecx, 0xffff
mov edx, dword [ebp - 0x70]
xor eax, eax
mov ax, word [edx + 0x10e3c]
sar eax, 8
and eax, 0xff
and eax, 0xff
mov edx, dword [ebp - 0x70]
xor ebx, ebx
mov bl, byte [edx + 0x10e3c]
shl ebx, 8
or eax, ebx
and eax, 0xffff
shl eax, 0x10
or ecx, eax
mov dword [ebp - 0x10], ecx
push 0
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x70]
call fcn.1001cc07
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x10022127
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], 0xffffffff
push 0
push 0xbb8
push 0
push 0
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x70]
call fcn.1001d015
mov dword [ebp - 8], 1
jmp 0x1002286e
jmp 0x10022840
push 1
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 0x10e4c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x10022840
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 0x10e4c]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x70]
cmp dword [eax + 8], 0
je 0x10022192
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10e54]
push eax
push str.USB_is_plugged_in__port___d__state___d
push 5
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 8]
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 8]
mov eax, dword [ecx]
push edx
call dword [eax + 0x1c]
add esp, 0x14
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x10cd8], 1
jne 0x100222a5
mov edx, dword [ebp - 0x70]
cmp dword [edx + 8], 0
je 0x100221c3
push str.New_USB_enumeration_feature_
push 5
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov eax, dword [ebp - 0x70]
mov dword [eax + 0xba0], 0
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10e54]
mov dword [ecx + 0xba4], eax
mov ecx, dword [ebp - 0x70]
mov dword [ecx + 0xba8], 0x1c200
mov edx, dword [ebp - 0x70]
add edx, 0xba0
push edx
mov ecx, dword [ebp - 0x70]
call fcn.1001c25a
test eax, eax
je 0x10022211
mov dword [ebp - 0x18], 0
jmp 0x10022840
cmp dword [ebp - 8], 0
jne 0x100222a0
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e2c], 0
je 0x1002223b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x70]
cmp eax, dword [ecx + 0x10e2c]
jae 0x100222a0
push 0
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10e34]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x1002227c
mov ecx, dword [ebp - 0x70]
call fcn.1001c18d
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 8], 0
je 0x1002227a
push str.Stop_mode_thread.
push 5
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx + 8]
mov eax, dword [ebp - 0x70]
mov edx, dword [eax + 8]
mov eax, dword [edx]
call dword [eax + 0x14]
jmp 0x100222a0
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 0x10e24]
push edx
mov ecx, dword [ebp - 0x70]
call fcn.100231ec
test eax, eax
jne 0x1002229b
mov dword [ebp - 8], 1
jmp 0x100222a0
jmp 0x10022211
jmp 0x1002286e
cmp dword [ebp - 0x18], 2
jne 0x10022325
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x70]
mov edx, dword [eax + 0x10e54]
cmp edx, dword [ecx + 0xba4]
je 0x10022325
mov eax, dword [ebp - 0x70]
xor ecx, ecx
mov cl, byte [eax + 0x10cd5]
test ecx, ecx
je 0x10022313
mov edx, dword [ebp - 0x70]
cmp dword [edx + 8], 0
je 0x10022307
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 0xba4]
push ecx
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10e54]
push eax
push str.Port___d_is_not_waiting_port.__d
push 5
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 8]
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 8]
mov eax, dword [ecx]
push edx
call dword [eax + 0x1c]
add esp, 0x14
mov dword [ebp - 0x18], 1
jmp 0x10022840
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10e54]
mov dword [ecx + 0xba4], eax
cmp dword [ebp - 0x18], 1
jne 0x100226cf
mov ecx, dword [ebp - 0x70]
mov dword [ecx + 0xba0], 0
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 0x10e54]
mov dword [edx + 0xba4], ecx
mov edx, dword [ebp - 0x70]
mov dword [edx + 0xba8], 0x1c200
mov eax, dword [ebp - 0x70]
add eax, 0xba0
push eax
mov ecx, dword [ebp - 0x70]
call fcn.1001c25a
test eax, eax
je 0x1002237c
mov dword [ebp - 0x18], 0
jmp 0x10022840
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x10e40], 0
je 0x100223b5
mov dword [ebp - 8], 1
mov edx, dword [ebp - 0x70]
cmp dword [edx + 8], 0
je 0x100223b0
push str.USB_mode_reset_success_
push 5
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 8]
mov edx, dword [eax]
call dword [edx + 0x14]
jmp 0x1002286e
mov eax, dword [ebp - 0x70]
xor ecx, ecx
mov cl, byte [eax + 0x10cd4]
test ecx, ecx
jne 0x10022422
mov edx, dword [ebp - 0x70]
xor eax, eax
mov al, byte [edx + 0xb9c]
shl eax, 8
or al, 1
push eax
push 0
push 0
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx + 0x10bb8]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10bb8]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov eax, dword [ebp - 0x70]
xor ecx, ecx
mov cl, byte [eax + 0xb9c]
shl ecx, 8
or ecx, 1
push ecx
push 0
push 0
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx + 0x10bc0]
mov eax, dword [ebp - 0x70]
mov edx, dword [eax + 0x10bc0]
mov eax, dword [edx]
call dword [eax + 0x18]
jmp 0x10022513
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x10e24], 5
je 0x10022486
mov edx, dword [ebp - 0x70]
cmp dword [edx + 0x10e24], 6
je 0x10022486
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e24], 8
je 0x10022486
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x10e24], 9
je 0x10022486
mov edx, dword [ebp - 0x70]
cmp dword [edx + 0x10e24], 0xc
je 0x10022486
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e24], 0xd
je 0x10022486
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x10e24], 0xf
je 0x10022486
mov edx, dword [ebp - 0x70]
cmp dword [edx + 0x10e24], 0x11
jne 0x10022513
mov eax, dword [ebp - 0x70]
xor ecx, ecx
mov cl, byte [eax + 0xb9d]
test ecx, ecx
jne 0x10022513
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10e3c]
shr eax, 0x10
and eax, 0xffff
and eax, 0xffff
sar eax, 8
and eax, 0xff
and eax, 0xff
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 0x10e3c]
shr edx, 0x10
and edx, 0xffff
and edx, 0xff
shl edx, 8
or eax, edx
and eax, 0xffff
mov ecx, dword [ebp - 0x70]
xor edx, edx
mov dx, word [ecx + 0x10e3c]
sar edx, 8
and edx, 0xff
and edx, 0xff
mov ecx, dword [ebp - 0x70]
xor ebx, ebx
mov bl, byte [ecx + 0x10e3c]
shl ebx, 8
or edx, ebx
and edx, 0xffff
shl edx, 0x10
or eax, edx
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0xffffffff
push 0
push 0xbb8
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x10]
push edx
mov ecx, dword [ebp - 0x70]
call fcn.1001d2c0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x100226ad
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e24], 0xa
jne 0x100226ad
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 8], 0
je 0x10022585
push str.Enter_RM_CALIBR_NV_ACCESS_MODE_success.
push 5
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx + 8]
mov eax, dword [ebp - 0x70]
mov edx, dword [eax + 8]
mov eax, dword [edx]
call dword [eax + 0x14]
mov dword [ebp - 8], 1
mov ecx, dword [ebp - 0x70]
xor edx, edx
mov dl, byte [ecx + 0x10cd4]
test edx, edx
jne 0x100226a8
mov eax, dword [ebp - 0x70]
xor ecx, ecx
mov cl, byte [eax + 0xb9c]
shl ecx, 8
or ecx, 2
push ecx
push 0
push 0
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx + 0x10bb8]
mov eax, dword [ebp - 0x70]
mov edx, dword [eax + 0x10bb8]
mov eax, dword [edx]
call dword [eax + 0x2c]
mov ecx, dword [ebp - 0x70]
xor edx, edx
mov dl, byte [ecx + 0xb9c]
shl edx, 8
or edx, 2
push edx
push 0
push 0
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 0x10bc0]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10bc0]
mov edx, dword [eax]
call dword [edx + 0x18]
mov byte [ebp - 0x34], 0x7e
mov byte [ebp - 0x33], 0
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x31], 0
mov byte [ebp - 0x30], 0
mov byte [ebp - 0x2f], 0
mov byte [ebp - 0x2e], 0xa
mov byte [ebp - 0x2d], 0x5e
mov byte [ebp - 0x2c], 0xff
mov byte [ebp - 0x2b], 0
mov byte [ebp - 0x2a], 0
mov byte [ebp - 0x29], 0x7e
mov byte [ebp - 0x48], 0x7e
mov byte [ebp - 0x47], 0
mov byte [ebp - 0x46], 0
mov byte [ebp - 0x45], 0
mov byte [ebp - 0x44], 0
mov byte [ebp - 0x43], 0xa
mov byte [ebp - 0x42], 0
mov byte [ebp - 0x41], 0x5e
mov byte [ebp - 0x40], 0xff
mov byte [ebp - 0x3f], 0
mov byte [ebp - 0x3e], 0
mov byte [ebp - 0x3d], 0x7e
push 0xc
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x70]
call fcn.1001c4d0
push 0xc
lea ecx, [ebp - 0x48]
push ecx
mov ecx, dword [ebp - 0x70]
call fcn.1001c4d0
mov byte [ebp - 0x36], 0x5e
mov byte [ebp - 0x35], 1
mov dword [ebp - 0x3c], 0xffffffff
mov word [ebp - 0x38], 0
push 0
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10bb4]
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0x70]
call fcn.1001d015
jmp 0x1002286e
mov edx, dword [ebp - 0x70]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x70]
call dword [eax + 8]
cmp dword [ebp - 0x14], 0
je 0x100226ca
mov dword [ebp - 0x18], 0
jmp 0x10022840
jmp 0x10022840
cmp dword [ebp - 0x18], 2
jne 0x10022840
mov ecx, dword [ebp - 0x70]
add ecx, 0xba0
push ecx
mov ecx, dword [ebp - 0x70]
call fcn.1001c25a
test eax, eax
jne 0x10022839
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10ce0]
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x70]
xor edx, edx
mov dl, byte [ecx + 0x10cd4]
test edx, edx
jne 0x10022830
mov eax, dword [ebp - 0x70]
cmp dword [eax + 8], 0
je 0x10022737
push str.Query_endian_mode
push 5
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx + 8]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov eax, dword [ebp - 0x70]
xor ecx, ecx
mov cl, byte [eax + 0xb9c]
shl ecx, 8
or ecx, 2
push ecx
push 0
push 0
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx + 0x10bb8]
mov eax, dword [ebp - 0x70]
mov edx, dword [eax + 0x10bb8]
mov eax, dword [edx]
call dword [eax + 0x2c]
mov ecx, dword [ebp - 0x70]
xor edx, edx
mov dl, byte [ecx + 0xb9c]
shl edx, 8
or edx, 2
push edx
push 0
push 0
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 0x10bc0]
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10bc0]
mov edx, dword [eax]
call dword [edx + 0x18]
mov byte [ebp - 0x54], 0x7e
mov byte [ebp - 0x53], 0
mov byte [ebp - 0x52], 0
mov byte [ebp - 0x51], 0
mov byte [ebp - 0x50], 0
mov byte [ebp - 0x4f], 0
mov byte [ebp - 0x4e], 8
mov byte [ebp - 0x4d], 0
mov byte [ebp - 0x4c], 0
mov byte [ebp - 0x4b], 0x7e
mov byte [ebp - 0x68], 0x7e
mov byte [ebp - 0x67], 0
mov byte [ebp - 0x66], 0
mov byte [ebp - 0x65], 0
mov byte [ebp - 0x64], 0
mov byte [ebp - 0x63], 8
mov byte [ebp - 0x62], 0
mov byte [ebp - 0x61], 0
mov byte [ebp - 0x60], 0
mov byte [ebp - 0x5f], 0x7e
push 0xa
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x70]
call fcn.1001c4d0
push 0xa
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x70]
call fcn.1001c4d0
mov byte [ebp - 0x56], 0
mov byte [ebp - 0x55], 0
mov dword [ebp - 0x5c], 0xffffffff
mov word [ebp - 0x58], 0
push 0
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10bb4]
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp - 0x70]
call fcn.1001d015
mov dword [ebp - 8], 1
jmp 0x1002286e
mov dword [ebp - 0x18], 0
cmp dword [ebp - 8], 0
jne 0x1002286e
mov edx, dword [ebp - 0x70]
cmp dword [edx + 0x10e2c], 0
je 0x10021f4e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x70]
cmp eax, dword [ecx + 0x10e2c]
jb 0x10021f4e
cmp dword [ebp - 8], 0
je 0x100228d4
mov dword [ebp - 0x6c], 0
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x10e28]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
je 0x10022891
jmp 0x100228d4
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 8], 0
je 0x100228bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Set_monitor_event_failed__error__0x_X
push 1
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 8]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 8]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x1c]
add esp, 0x10
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 3
jle 0x1002287b
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x10e44], 0xffffffff
jle 0x10022905
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 0x10e44]
push edx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax + 0x10bc4]
call fcn.1001e33f
mov ecx, dword [ebp - 0x70]
mov dword [ecx + 0x10e44], 0xffffffff
mov edx, dword [ebp - 0x70]
mov dword [edx + 0x10e38], 0
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret