Function at 0x1026498
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
xor ebx, ebx
xor eax, eax
push esi
mov esi, dword [ebp + 8]
inc eax
cmp dword [esi + 0x84], ebx
mov dword [ebp - 4], 2
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x10], eax
jne 0x10264ca
cmp dword [esi + 0x8c], eax
jne 0x10264d2
or eax, 0xffffffff
jmp 0x1026888
cmp dword [esi + 0x1c], ebx
jne 0x10264ef
mov eax, dword [esi + 8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_UnlockWindowStation]
mov eax, dword [esi + 8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_LockWindowStation]
push edi
push 0xb
pop ecx
xor eax, eax
lea edi, [ebp - 0x40]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x40], esi
call fcn.01025e7c
cmp dword [ebp + 0x14], ebx
je 0x1026516
cmp dword [ebp - 0x3c], ebx
jne 0x1026516
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
cmp eax, ebx
je 0x102683d
lea eax, [ebp - 0x40]
push eax
call fcn.01025cb4
test eax, eax
je 0x102683d
cmp dword [ebp - 0x3c], ebx
jne 0x1026550
mov eax, dword [esi + 0x7c]
cmp eax, 9
je 0x1026550
cmp eax, 0xa
je 0x1026550
push 0x2000000
push ebx
push ebx
call dword [sym.imp.USER32.dll_OpenInputDesktop]
jmp 0x1026564
push ebx
push 0x2000000
push ebx
push ebx
push ebx
push 0x10125bc
call dword [sym.imp.USER32.dll_CreateDesktopW]
mov ecx, dword [esi + 8]
mov dword [ecx + 0x18], eax
mov eax, dword [esi + 8]
cmp dword [eax + 0x18], ebx
je 0x1026812
mov dword [ebp + 8], ebx
push dword [eax + 8]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edi, [eax + eax + 0x7c]
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
cmp eax, ebx
mov dword [ebp - 0x1c], eax
je 0x1026812
mov ecx, dword [esi + 8]
push dword [ecx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x1010ab0
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ebx, [eax + eax]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp + 8]
push ecx
sub edi, ebx
push edi
mov edi, dword [sym.imp.USER32.dll_GetUserObjectInformationW]
add eax, ebx
push eax
mov eax, dword [esi + 8]
push 2
push dword [eax + 0x18]
call edi
test eax, eax
jne 0x1026637
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1026810
mov eax, dword [esi + 8]
push 0x42
push dword [eax + 8]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp + 8]
lea eax, [ecx + eax*2 + 4]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
test eax, eax
je 0x1026810
lea ecx, [ebp + 8]
push ecx
push dword [ebp + 8]
add ebx, eax
push ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 8]
push 2
push dword [eax + 0x18]
call edi
test eax, eax
je 0x1026810
lea eax, [ebp - 0x3c]
push eax
push dword [esi + 0x3a8]
call dword [esi + 0x3e4]
test eax, eax
je 0x1026810
mov eax, dword [esi + 0x7c]
xor ecx, ecx
inc ecx
xor edi, edi
cmp dword [ebp - 0x3c], edi
mov dword [esi + 0x84], ecx
je 0x102666e
mov dword [ebp - 0xc], eax
mov dword [esi + 0x7c], 8
jmp 0x1026678
cmp eax, 9
je 0x1026678
cmp eax, 0xa
jne 0x1026683
push ecx
push esi
call fcn.010317b0
test eax, eax
je 0x10266c1
lea eax, [ebp - 0x40]
push eax
call fcn.01025ddc
test eax, eax
jne 0x10266cc
cmp dword [ebp - 0x3c], edi
je 0x10266a1
cmp dword [esi + 0x1c], edi
mov dword [ebp - 4], 3
jne 0x10266a8
mov dword [ebp - 4], 2
cmp dword [ebp - 0x3c], edi
jne 0x10266ba
mov eax, dword [esi + 0x7c]
cmp eax, 9
je 0x10266ba
cmp eax, 0xa
jne 0x10266c1
push edi
push esi
call fcn.010317b0
mov dword [esi + 0x84], edi
jmp 0x1026810
push 4
push esi
call fcn.010392b1
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
push 0
push esi
mov edi, eax
mov dword [ebp - 0x30], 3
call fcn.0103af03
lea eax, [ebp - 0x40]
push eax
push 0x1026397
push 0
push 0x578
push dword [0x10733b8]
push esi
call fcn.0103b0bd
mov dword [ebp - 4], eax
call ebx
mov ebx, eax
xor eax, eax
cmp dword [esi + 0xe74], eax
je 0x1026734
cmp dword [0x1073324], eax
je 0x1026734
push eax
mov dword [0x1073324], eax
mov dword [ebp - 8], 1
call fcn.0102b7b1
push 5
push esi
call fcn.010392b1
cmp ebx, edi
ja 0x1026749
or eax, 0xffffffff
sub eax, edi
add ebx, eax
jmp 0x102674b
sub ebx, edi
xor edi, edi
cmp dword [ebp - 0x3c], edi
je 0x102679b
cmp dword [esi + 0x1c], edi
je 0x10267af
cmp dword [ebp + 0x10], edi
je 0x1026778
push 5
push 0x101258c
push 0x1010fcc
call dword [sym.imp.KERNEL32.dll_GetProfileIntW]
imul eax, eax, 0x3e8
cmp ebx, eax
jb 0x102678e
cmp dword [esi + 0xe74], edi
jne 0x102678e
cmp dword [ebp - 8], edi
jne 0x102678e
mov dword [ebp - 4], 3
jmp 0x102679b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], 2
mov dword [esi + 0x7c], eax
cmp dword [esi + 0x1c], edi
je 0x10267af
cmp dword [esi + 0x1488], edi
je 0x10267af
mov dword [ebp - 4], 3
push 4
pop ebx
cmp dword [ebp - 0x30], ebx
je 0x10267e2
cmp dword [ebp - 4], 3
je 0x10267e2
cmp dword [ebp - 0x3c], edi
jne 0x10267cf
mov eax, dword [esi + 0x7c]
cmp eax, 9
je 0x10267cf
cmp eax, 0xa
jne 0x10267db
mov eax, dword [esi + 8]
push dword [eax + 0x20]
push esi
call fcn.010317b0
call fcn.010200ea
jmp 0x10267e9
push edi
push esi
call fcn.010317b0
cmp dword [ebp - 0x2c], edi
mov dword [esi + 0x84], edi
je 0x1026810
cmp dword [ebp - 0x30], 3
je 0x1026810
cmp dword [ebp - 0x30], ebx
jne 0x1026807
mov dword [esi + 0x34], ebx
mov dword [ebp - 4], ebx
jmp 0x1026810
push dword [ebp - 0x30]
push esi
call fcn.0103aeb8
xor ebx, ebx
lea eax, [ebp - 0x40]
push eax
mov dword [esi + 0x8c], ebx
call fcn.01026360
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x18]
cmp eax, ebx
je 0x1026838
push eax
call dword [sym.imp.USER32.dll_CloseDesktop]
mov eax, dword [esi + 8]
mov dword [eax + 0x18], ebx
mov eax, dword [ebp - 4]
jmp 0x1026887
mov esi, dword [sym.imp.USER32.dll_SystemParametersInfoW]
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
push 0x10
call esi
test eax, eax
je 0x102686d
cmp dword [ebp - 0x10], ebx
je 0x102686d
push ebx
lea eax, [ebp - 0x14]
push eax
push ebx
push 0xe
call esi
test eax, eax
je 0x102686d
push ebx
push ebx
push dword [ebp - 0x14]
push 0xf
call esi
lea eax, [ebp - 0x40]
push eax
call fcn.01026360
cmp dword [ebp - 0x38], ebx
je 0x1026884
cmp dword [ebp - 0x3c], ebx
je 0x1026884
push 3
jmp 0x1026886
push 2
pop eax
pop edi
pop esi
pop ebx
leave
ret 0x10